last executing test programs: 14.020298919s ago: executing program 3 (id=1395): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@volatile={0x5, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x61, 0x2e, 0x2e, 0x5f, 0x30, 0x0, 0x2e]}}, &(0x7f0000000780)=""/4096, 0x2d, 0x1000, 0x1, 0x3}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x24, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 11.989739249s ago: executing program 1 (id=1407): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0xe, 0xc, 0x32315241, 0x5, 0x568d, 0x3, 0x2, 0x8, 0x1, 0x1, 0x1}}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000000c0)=0x100000001, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb90402200800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600200001401c00010003580461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3b8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6f4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000180)={0x3, 0x980900, 0x1}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 11.237220511s ago: executing program 3 (id=1410): open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x8000001, 0x0, 0x0, 0x0, 0x4040007}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r1]) r3 = syz_open_dev$evdev(&(0x7f0000000100), 0x4, 0x200) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000180)=""/4096) syz_usb_connect(0x2, 0x4f, &(0x7f00000012c0)={{0x12, 0x1, 0x311, 0x6, 0x26, 0x98, 0x20, 0xc52, 0x2843, 0xca31, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x1, 0x8, 0xd, 0x10, 0x5, [{{0x9, 0x4, 0xf1, 0x1, 0x3, 0x56, 0x5c, 0xec, 0x3, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x0, 0x7f, 0x1002}]}, @hid_hid={0x9, 0x21, 0x1ff, 0x6, 0x1, {0x22, 0x724}}], [{{0x9, 0x5, 0x2, 0x0, 0x20, 0x9, 0x9, 0x8}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x9, 0x9, 0x24}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x1, 0x80, 0x5}}]}}]}}]}}, &(0x7f0000001740)={0xa, &(0x7f0000001340)={0xa, 0x6, 0x201, 0x3c, 0x9, 0xf, 0x8}, 0x90, &(0x7f0000001380)={0x5, 0xf, 0x90, 0x2, [@wireless={0xb, 0x10, 0x1, 0x0, 0x2, 0x6, 0x0, 0x7, 0x81}, @generic={0x80, 0x10, 0x3, "6685a6c8f0a1d79e9fad1ef32fcf2c2c5b4393e0fbff4c21cf45fc126f4e6165fccd726b7a3bba0a89986457ea25d0ff74a78f460c1fbbffd9c200905e0662dbe3ab53e2e39999580081139cf27b39f6fd75f0387f74be1fed170dfc609ab65fd46309372363589d4538561529cbafb4e634cc05e351eae514a19c5fee"}]}, 0x5, [{0x17, &(0x7f0000001440)=@string={0x17, 0x3, "7cd439429627c770dbaab6df360e9c27f7e9c4089a"}}, {0xe0, &(0x7f0000001480)=@string={0xe0, 0x3, "07eb95b995f7ea23c8f221dc2c3fe768248c41391a6e2114b9f3bd76b893ffa4f6d35610e234230e0e6225c045a64caf96c8494e8b7188821e6cf3943d1b357a5efdd6849728f67011260bbc49cc47b24bc0d68e659c5c73c18edbbb2e21fd8a3f1d74f7535647f344224e5e3814fac2c2d950661a536e6ecf9aadb96236504d3e22e1b3f1124942ba26b7f1b695c78a55551fe2d648db32d1b7be00dd62620f4dd5636eaea379f7b514f520db6796bebb161f30dcb34cc794c4f323efc6194f2ad3b9cc4d20f57a8e66a13ff2d07901d4ee266742d329c64d2380175ee8"}}, {0xaf, &(0x7f0000001580)=@string={0xaf, 0x3, "fa47a93a086f080c902e75c7bcb1a179e52293c41320f133e03aff7f0365084a3c62c7433e681ae3f84630fb06dcf26ef9942e8d7c3fa7d9ccb92272e5be6bdade7cf5b4ab689da84fc7418d075a299b065bb79b86d39937c692e15858187a36fd177e7137859ec50d35538e590c42d7175eda66ff24a7b9ab30a080cea1a5ba3ee05683ec004962493ceade314dbe597b1debaca4e03654b57f6e07795b0a502c3a4b688af5c4e11f7afb5639"}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0xc09}}, {0x9f, &(0x7f0000001680)=@string={0x9f, 0x3, "56c053082130558388d4b3c3d36830da4a077657392eba88ea027f22969198f2f2f85838a74cf87da5d7a4a4ee9e3364a141e3f5e87c562ffc5f2d1cf4c6af35e73c053fc86239ebf3daad4d658157ac187cb6d34bb08d0fff898eb65ac36fe2cf91bed4cd1f8c85253905765dac79f1b4f4d6f2fb3d5c05bf2d9a46b7fd8707fb06439096bd3bc7d202cc51f0d4dced1223cf4b3e9473520eab82d805"}}]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = io_uring_setup(0x79c4, &(0x7f00000001c0)={0x0, 0x701e, 0x400, 0x2, 0x64}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x1) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x40000, 0x6) recvfrom$unix(r5, &(0x7f0000000100)=""/133, 0x85, 0x40010101, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x2c, r8, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004024}, 0x30) r9 = io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0x9c3d, 0x0, 0xffffffff, 0x2}) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r10, 0x545c, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000080)={0x0, 0x0}) 10.983201435s ago: executing program 1 (id=1411): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000c502000000000000628f25ba73000000", @ANYRES32, @ANYBLOB="0000000000000000660800000000000018000000000000000000000000000000360a0200000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000ff7f0000000000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000017007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) r3 = dup(r2) r4 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r4, 0xb, &(0x7f0000001080), 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x0, 0x4000}, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = accept4(r5, 0x0, 0x0, 0x0) read$alg(r6, &(0x7f0000000340)=""/190, 0xbe) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) userfaultfd(0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r7, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r8, 0x400448ca, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', r3}, 0x18) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x40, 0x40, 0x101}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) 9.955788692s ago: executing program 4 (id=1414): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x70, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x38, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4, 0x3}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xe, 0x8001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80, 0x189}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x70}, 0x1, 0xba01}, 0x8800) 9.865700969s ago: executing program 4 (id=1415): r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f00000010c0)="9c", 0x1}], 0x1, 0x6) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000001480)={0x60, 0x3, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x81, &(0x7f0000001380)=[{0x2, 0x9, 0xc23a}, {0x9, 0x7, 0x100000000}, {0xffffffff, 0x100000001, 0x8000}, {0xda, 0x1, 0x80000001}, {0x2, 0x7, 0x7}, {0x0, 0xf, 0x100000000000}, {0x6, 0xe58e, 0x7fffffffffffffff}, {0x80, 0x7a9d4f37, 0x40}, {0x3, 0x57d5, 0x95df}], 0x9, 0x800100000000, 0x11, 0x0, 0x8, 0x2e}) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000440)={'comedi_parport\x00', [0x4e27, 0x1f, 0x3, 0x7fffffff, 0xe7, 0x8, 0x8, 0xa82, 0x40, 0x100, 0xcf3, 0xb, 0x400, 0x2, 0x3, 0xffffffea, 0x10001, 0x10087, 0x2, 0x0, 0x2, 0x289c, 0xf23, 0x2000007, 0xb, 0xbfd, 0x3c, 0x5, 0x6, 0x0, 0x80000000, 0x3]}) r4 = mq_open(0x0, 0x40, 0x1a2, 0x0) mq_notify(r4, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r5, 0x80044dfb, &(0x7f0000000040)) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r6, @ANYRESDEC=0x0], 0x8c8}}, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000008300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r7}, 0x38) statx(r1, &(0x7f0000007f00)='./file0\x00', 0x0, 0x2, &(0x7f0000007f40)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000008040)) r8 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) r12 = shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_SET(r12, 0x1, &(0x7f0000000180)={{0x3, r10, r11, r10, r11, 0x40, 0x6}, 0x9, 0x9, 0xd, 0x9, r9, r9, 0x4}) 9.187999454s ago: executing program 4 (id=1418): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000003c1a302c77d7770c01000600000000000275db1c7daf73be8eda03c574791a8b0ea42c3b30580ed2c3480e248147d84ef207e1100dc967075099e6b76f542b23090000000000000087b08c5295aa2d55f4b7a56a9311980b59d55c9d32e891e6a4aa7daa0a1960199a772c9fbc83fe5ad981d7ed22b220e9c9ccacc567546d14099f32fe4eb7d03c2b07be30c1e5c3f4fefa0d2c90fefab536f09e13cf7782e9", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8000000) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x48, 0x0, &(0x7f0000000040)=[@clear_death={0x400c630f, 0x3}, @acquire_done={0x40106309, 0x1}, @request_death={0x400c630e, 0x1}, @release={0x40046306, 0x2}, @dead_binder_done], 0x0, 0x0, 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000dc0)={{0x1, 0x3, 0x9, 0x800, 0x5, 0x5}, 0x8d, [0x7, 0x93b, 0x6, 0x1, 0x1, 0xb8a, 0x2f, 0x100, 0x5, 0x7, 0x7, 0x5, 0x41d4, 0x83, 0x4, 0xffffffff, 0x9, 0x1000, 0x77e4, 0xffff0c56, 0x3, 0x1, 0x0, 0x40, 0x9, 0x200, 0x69, 0x204, 0x0, 0x6, 0x3, 0x7, 0x8, 0x8, 0xa522, 0x100, 0xfffffff8, 0x80000001, 0x0, 0x40, 0x1, 0x6, 0x1, 0x7fffffff, 0x5eb9, 0x5, 0x9c05, 0x800000c, 0x401, 0x4, 0x75, 0x817, 0xb, 0x3, 0xda90, 0x7, 0xf, 0xbc4b, 0x106, 0xfd, 0x81, 0x6, 0x101, 0x39, 0xffffff7f, 0x6, 0x5, 0x5, 0x77, 0xfffffffd, 0x0, 0x9, 0x73f, 0x5, 0x8, 0x4, 0x3, 0xffffffff, 0x5, 0x26be23d3, 0x7, 0x2, 0x9, 0x8, 0xdd2, 0xdd2, 0x3, 0x4, 0x2, 0xfff, 0x80000001, 0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x5, 0x2, 0x1, 0x80000001, 0x7, 0x0, 0x40, 0x5, 0x101, 0x8, 0x9, 0x334c230c, 0x6, 0x4, 0xfffffff9, 0x8, 0x3, 0xffff0002, 0x7, 0x2, 0xffffffff, 0x4, 0x3, 0x4, 0x4, 0x3f, 0x81, 0x3, 0x400, 0x4, 0x984, 0x1, 0x6, 0x7, 0x8001, 0x1ff, 0x2a3, 0x6d, 0x1, 0x10000, 0x5, 0x80000000, 0x1d01e, 0x1, 0x3, 0xfffffffb, 0x8, 0x63, 0x400, 0x5, 0x401, 0x4, 0xfff, 0x0, 0x9, 0x3, 0x8, 0xfffffff9, 0x2, 0x80000000, 0x3, 0xc, 0x1, 0xad, 0x100, 0x144, 0x2, 0xfffffffc, 0x2, 0x5, 0x0, 0x5, 0x9, 0x1, 0x4, 0x1000, 0x974, 0x5, 0x2, 0x8, 0x5, 0x88, 0x1000, 0x0, 0x1, 0x2, 0x5, 0x9, 0x0, 0x57a, 0x0, 0x0, 0x6, 0x9, 0x5c, 0x6, 0x9, 0xd22, 0x12, 0x7, 0x10, 0x8, 0xffffffff, 0x2149, 0xf, 0x26a02622, 0x7fff, 0x8, 0x8, 0x7ff, 0x5, 0x8, 0x81, 0x8, 0xff, 0x5, 0xfffffffa, 0x2, 0x2, 0xffff, 0xf, 0x5, 0x7, 0x5, 0x100, 0x1e06, 0xf, 0xdf2, 0x0, 0xbb, 0xfff, 0x400, 0x2, 0x80000000, 0x7, 0x8, 0xf9b, 0x8, 0x7ff, 0x7, 0x3ff, 0x630a, 0x5, 0xcff, 0x9, 0xb7, 0x1, 0xff, 0x4, 0x5, 0x10, 0x1, 0x92a, 0x3, 0x5, 0xd, 0x5, 0x101, 0x6, 0x7fff, 0x3, 0x3, 0x4, 0x0, 0x7f, 0x200, 0x20, 0x7, 0x1000000, 0x0, 0x7f, 0x53, 0x8, 0x8, 0x5, 0x2, 0xf, 0xd81c, 0x840, 0x1, 0x9, 0x2, 0x81, 0x9, 0x3, 0x5, 0x1000, 0x8, 0x47, 0x94, 0x7, 0x8, 0x8001, 0x56f71051, 0x1, 0x867, 0x3ff, 0x40, 0x6, 0x3, 0xfff, 0x5, 0x197, 0x9, 0x6, 0x5, 0x6, 0x7, 0x0, 0xffff, 0x3, 0x1ff, 0x400, 0x3, 0xd42, 0x9, 0x5, 0x1ff, 0x4, 0x9, 0xbec, 0x5, 0x7, 0x3, 0x5, 0x64000000, 0x2, 0x1e, 0x3a, 0x6, 0x5, 0x18000, 0x2, 0xffff, 0x9, 0x6, 0x9, 0x0, 0xe4f, 0x67c, 0x27b7, 0xe, 0x9, 0x9, 0x5, 0xd, 0x5, 0x6, 0x76, 0x9, 0xc4fe, 0x9, 0x3, 0x4, 0x8, 0x87, 0x1, 0x4, 0x6, 0x40, 0x9, 0x8, 0x1, 0x6, 0x8, 0xc75e, 0x4, 0x6, 0x1b, 0xfd3, 0x2, 0x3, 0x9, 0x10, 0x4, 0x5d2f, 0x5, 0x1b, 0x3ff, 0x5, 0x8, 0x6, 0xc000000, 0x5c, 0x9, 0x541b, 0xce, 0x6, 0x4, 0x69f, 0x3, 0x5, 0x7, 0x4, 0x200, 0x7, 0x8, 0x2323, 0xfffffff7, 0xffff, 0x7ff, 0x4, 0xd, 0xffffff42, 0x89, 0x80000001, 0x3ff, 0x3, 0x554, 0x80000de, 0x0, 0x400, 0x3, 0x9, 0x800, 0x7cb3aca3, 0x6, 0x6, 0x4, 0xf8000000, 0x1, 0xfffffff9, 0x9, 0x0, 0x0, 0x3, 0x10000, 0x4, 0x3, 0x0, 0x8, 0xbb, 0x5, 0xf548, 0x3, 0x36c, 0xffffffff, 0x10, 0x676, 0xe67, 0x88, 0x808, 0x560, 0x6db6, 0xa7b, 0x2, 0x4, 0x9, 0x3, 0x4, 0xffffffff, 0x6, 0xed2, 0x24bdaad2, 0x9, 0x4, 0x3, 0x1, 0xd599, 0x2, 0x6c51, 0x2, 0x0, 0x0, 0x2, 0xfce6, 0xf, 0xcd0, 0x4, 0xf, 0x0, 0x9, 0x5, 0x200, 0x6, 0x5, 0x2, 0x7, 0x17, 0xc36, 0x0, 0x8fbb, 0x3, 0x5, 0x0, 0x8, 0x8, 0x1, 0x8, 0x1000001, 0x45d8, 0x9, 0x0, 0x60000, 0x7, 0x2, 0xfffffff1, 0x3, 0x2, 0xfdfffd67, 0x2, 0x4, 0x5, 0x3, 0x800, 0x10, 0xa, 0xb12c, 0x5ce, 0x1, 0xfffffffd, 0xf9c8, 0x0, 0x80f4, 0x10000, 0x3, 0x8, 0x2, 0x7, 0x5, 0x8, 0x401, 0x7, 0x10, 0x0, 0x6b, 0x100, 0x8, 0x2, 0x2, 0x5273, 0xe45f, 0x10, 0x0, 0x8, 0x4, 0x7, 0x7, 0x6, 0x4, 0x8e8b, 0x5, 0x3, 0x7, 0x3, 0xe535, 0x9, 0x5, 0x6, 0x0, 0x3, 0xff, 0x7fffffff, 0x5, 0x1, 0xa, 0x4, 0x1, 0x31, 0x0, 0xee1, 0x10001, 0x3, 0xfffffffc, 0x4, 0x1, 0x6f9, 0x7, 0xb26c, 0xb, 0x0, 0xfffffff3, 0x8, 0x8, 0x3, 0x6, 0xfd, 0x3, 0x3d, 0x6, 0x80000001, 0x5, 0x7, 0x1, 0xffffffff, 0x6, 0x3d29, 0x4, 0x7, 0x8, 0xb04, 0x3, 0xea6, 0x9, 0x101, 0x4, 0x1400, 0xfffffeff, 0x7, 0x2, 0x4, 0x8, 0x7, 0xe, 0x2, 0xc, 0x2, 0x2, 0x64c1, 0x80000000, 0x200, 0x2, 0xfffffffd, 0x1, 0x91, 0x8001, 0x401, 0x781d, 0x80, 0xfffff5b0, 0x8, 0x3, 0x8, 0xfff, 0xcd800000, 0x9, 0x6, 0x0, 0x5b5, 0x7, 0x10, 0x2, 0x1, 0x10001, 0xc, 0x9e9, 0x53, 0x8001, 0xc, 0xc00, 0x40, 0x401, 0xf2a6, 0x7, 0x3, 0x2, 0x7, 0xfffffff7, 0x0, 0x3ff, 0x3, 0x7fffffff, 0x4, 0x0, 0x1, 0xf, 0x7, 0xa84d, 0x3, 0xaf, 0xaf72, 0x5f, 0x1, 0xe, 0x6, 0x9, 0x5, 0x7, 0x3, 0x5, 0x3, 0x40, 0x1000, 0x75f1, 0x4, 0x3, 0x1, 0xfffffffd, 0x4, 0x8, 0x10, 0x80, 0x2, 0x6, 0x0, 0xe, 0xc, 0x3, 0x2, 0xd, 0x5, 0x8, 0x6, 0x8, 0x3, 0x6, 0x5, 0x3, 0x101, 0x8, 0xbd, 0xa, 0x8, 0xffffed34, 0x8000, 0x2, 0x7, 0x7, 0x55f47279, 0xd, 0x3b, 0x5, 0x8, 0xffffffff, 0x4, 0x81, 0x6, 0xb, 0x2, 0xa53, 0xff, 0x0, 0x2, 0x5, 0x3233, 0xff, 0x6, 0x2, 0x9, 0x1, 0x0, 0x3ff, 0x5, 0x8, 0x40, 0x0, 0x40, 0x88, 0x5, 0x80, 0x4, 0xd0000000, 0x8, 0x4, 0x5, 0x5, 0x7, 0x0, 0x0, 0x76b, 0xbb, 0x2, 0x5, 0x7fff, 0x9, 0xa, 0x5, 0x80, 0x4, 0x8, 0x8, 0x1f, 0x1, 0x3, 0x4, 0xd126, 0x7, 0x5, 0x0, 0x0, 0x8, 0x4, 0x1, 0x5, 0xfffffffa, 0x8, 0x270b, 0x5, 0x7fff, 0x4, 0x5, 0x6, 0x3, 0x4, 0x13f, 0x0, 0xc906, 0x6, 0x100, 0x4, 0x3, 0x3, 0x7f, 0x2b, 0x4, 0x3, 0x3, 0x8001, 0x46f, 0x19f1, 0x6, 0x20, 0x2, 0x2, 0x6, 0x5, 0x5, 0x401, 0x5, 0x6, 0x4, 0x7, 0xb, 0x200, 0x6, 0x9, 0x7, 0x3, 0x1, 0x7f, 0x4, 0xc3b, 0xfdf5, 0x0, 0x3, 0x0, 0xf, 0x1, 0x800, 0x4f35, 0x1, 0x18, 0x5, 0x0, 0x6, 0xaa5, 0x800, 0x9, 0x7, 0x800, 0x8, 0xfffffffb, 0xff, 0x5, 0x1000, 0x8, 0x81, 0x6, 0x80, 0x9, 0x8, 0x5, 0x8, 0x8, 0x100, 0x5, 0x10, 0x3, 0x7, 0x82, 0x4, 0x40, 0xabde, 0x1, 0xb, 0x8, 0x5, 0x8, 0x7f, 0x100, 0x8, 0x9, 0x6, 0x80000001, 0x2, 0x8, 0x2, 0x7fff, 0x3, 0x6, 0x4, 0x5, 0x3, 0x0, 0x1, 0x8, 0x59, 0x1, 0x0, 0x48, 0xaa16, 0xc, 0x401, 0x1, 0x401, 0x8, 0xc11, 0x4, 0x0, 0x7, 0x2, 0x7f, 0x0, 0x1, 0xc0000, 0x5, 0x4, 0xef47, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0xe14f, 0x5, 0x7, 0x8, 0x7fffffff, 0x7f, 0xffffffff, 0xffffff88, 0x400, 0x7fffffff, 0x10, 0x5, 0x9, 0x5, 0x0, 0xff, 0x0, 0x8, 0x3, 0x5, 0xfffffffc, 0x9, 0x11, 0x9, 0xfffffffe, 0x40, 0x3, 0x7, 0x0, 0x1, 0x2, 0x6, 0x81, 0x4, 0x401, 0x6, 0x5, 0x3, 0x0, 0xd, 0x6, 0xc, 0x2, 0x1, 0xfffffe5c, 0x40, 0x0, 0x9, 0x24, 0x1ff, 0x4, 0xe92, 0x5, 0x6e3, 0x4, 0xff, 0x0, 0xdf, 0x5, 0x6, 0x100, 0x3ac9, 0x10001, 0xae27, 0x7f, 0x81, 0x7, 0x7fff, 0x0, 0xb, 0x4, 0x1, 0x1, 0x0, 0x9, 0x331d, 0x5, 0xb9, 0xfffffff7, 0x4, 0x4, 0x9, 0x6cf3, 0x8, 0x7, 0xf, 0x9, 0x9, 0xffff, 0x8000, 0x1, 0x2, 0x2, 0xdc0, 0x5, 0x100, 0x9, 0x1, 0xfffffff8, 0x800, 0x3, 0x0, 0x9, 0x644a, 0x93, 0xb0, 0x2, 0x3ff, 0x800, 0xfffffff7, 0x2, 0x0, 0xff]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000005000000090000008400000044010000", @ANYRES32, @ANYBLOB="0000001406000000000000007cdaf1142bbffa05813c3080b9ce0b71274fa2ce9a7f9ed300000000fe2d80d0722a967fb88d3e6ad536f513c8f71bd50ce5ea3e1aff67a57221f00dbde29aa70ff48a623c3cc645e87e96a23e972491d39e68a9ded3dc4892182cca79ea0aa3d82b482897871c81cc5a499e8dcc01f087326dbefaa9dbc23a6a6f733c25b76d78907470f23ee08d9571725b32240b81a49b6cc560b4255d1926ca8e7bfb62b7f09391d42b360086812c0be46b40", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000d40), 0x21800, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r4}, 0x38) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000c57000), 0x0) ioctl$UFFDIO_ZEROPAGE(r5, 0xc018aa06, &(0x7f0000000380)={{&(0x7f00007db000/0x2000)=nil, 0x2000}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0xffe0, 0xf}, {0xffff, 0xc}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 9.118869521s ago: executing program 1 (id=1419): r0 = syz_open_dev$evdev(0x0, 0x2, 0x0) ioctl$EVIOCGABS20(r0, 0x40044591, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x25, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x9, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb54, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 8.74935406s ago: executing program 1 (id=1420): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@volatile={0x5, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x61, 0x2e, 0x2e, 0x5f, 0x30, 0x0, 0x2e]}}, &(0x7f0000000780)=""/4096, 0x2d, 0x1000, 0x1, 0x3}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x24, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000400)=0x6, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 8.706114503s ago: executing program 0 (id=1421): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="c04b82360f69574fde5d", 0xa, 0xfffffffffffffffc) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="81282648ecd39b624504d3feb15791aaf388d259e6f49dbdf407ebfc6b48edc2a8c2aa846967f9b4fdc62747e2412530cb5f8174b4a9b61555bb682fb1153c7c04a1ae2859b4e0381d0d939d431b2e201e61c8eba83414f4d2824099e3a825eb174918a8efe75de17b31f43c130fb31a93517e311bd3d67eef7057fbc6149ce00ae01499eb64056633fd6aa81637fab351e0da5708", 0x95, 0xfffffffffffffff9) r2 = add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="54988b44bb86a5409a6e0041933d8ad649bd70b88d70420069b6c828195656b5662622eba457d5a4c5df5307b7e90a766915deab91acb70f53a60bb99e4ae452820b7a8e258a65e20c6ef46141014f59933beaa3c94b59dbdcbbca224761dd1657445f3406e221409ec47e09bf15be58a3a9aaa90d4055ee880bb76513973b8fc55f1c3800f1ab6f81824448f8961cf05202c71ac183c9dcd54e9d62e207023b2875fcbaacf3", 0xa6, 0xfffffffffffffffa) keyctl$dh_compute(0x17, &(0x7f0000000340)={r0, r1, r2}, &(0x7f0000000380)=""/172, 0xac, &(0x7f0000000540)={&(0x7f0000000440)={'sha224-ssse3\x00'}, &(0x7f0000000480)="6914afd9efa6c600618a6dc7fda817deb36bf0f451b3da686e63de2d0ba5fbdd43e047f1aa524be7a0d0b3ce9ed29f9d1b60adeec013e87f962314288c8e5e3e9dbae669234606648dd8abe72c98f6b71b7044169a2457a84a557354a41b22c9b64fd0d0189a17a77388766a21e5e6cbdea25f156e334ed29b443a4f096fb9f9888335d6dcf67ac067dc116b5e25fa39fe66cb1673ae87f9ab", 0x99}) add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000600)={0x1, 'vcan0\x00', {}, 0x800}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000640)={'veth1_to_bridge\x00', 0x2000}) syz_usb_connect(0x0, 0x174, &(0x7f0000002c00)={{0x12, 0x1, 0x201, 0x36, 0x8c, 0xda, 0x10, 0x413c, 0x81ba, 0x403, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x162, 0x1, 0x8, 0xe, 0xa0, 0xc, [{{0x9, 0x4, 0xe8, 0x3, 0x2, 0x2, 0x6, 0x0, 0xd, [], [{{0x9, 0x5, 0x2, 0x10, 0x3ff, 0x3, 0xa, 0x1, [@generic={0xcc, 0xc, "73f7d6f2e262d9f04341ed9b8663ed0c2ed2d4f64a46037dda0e2456cfc5b163a4fd934b0da2e98e75d14ec9f01486dfaf9313e3de00da6f26853f48e013531d8c15bc4b1b49863c89fabd6268e38be1a23e362f20c273528886149441532e0e5a503ac0fdcc4e7550d93c1ae84d9bdc0e2eae1cdced5affbbe3f5c06ded61060d0e69c3c41965017c95ab3616e5db2071cc40a9eae89b50d9c882fb18f7b8ec561eab63926106b59f064851e15521b619badd7f8903efe1e0f641eeae907b3f155dfe3bc3769f9a5d75"}, @generic={0x6b, 0x12, "3a83332b9c8efdc62741058476615f6bccd7db251f052ad1ec2ad21c9d8cdbc734f5472d52b19cf0d2fb7c9a0260b0432bfca1e9e26b27e3cba38104ca377a49f12ca2e34724f5da45116c3bde84d954de91d97ea80d9ac7bcbcdcee115ed3de898b5e58366ab5f793"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0xff, 0x8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x41, 0x72e3}]}}]}}]}}]}}, &(0x7f0000002ec0)={0xa, &(0x7f0000002d80)={0xa, 0x6, 0x310, 0x9, 0x6, 0xab, 0x20, 0xd}, 0x23, &(0x7f0000002dc0)={0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x8, 0x0, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0xc, "1cd14222b18ac562d842d2875fcf5de0"}]}, 0x3, [{0x32, &(0x7f0000002e00)=@string={0x32, 0x3, "1fadac299671b6c1f949236f0de2a77b59e26128b8a09944eb28096b313eba915ee19e53358ed2154c0d22affd788df5"}}, {0x4, &(0x7f0000002e40)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f0000002e80)=@lang_id={0x4, 0x3, 0x408}}]}) 7.519647099s ago: executing program 2 (id=1423): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) 7.422645534s ago: executing program 3 (id=1424): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) close_range(r5, r5, 0x0) acct(0x0) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8) openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa9}, 0x0) 7.320106338s ago: executing program 2 (id=1425): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x70, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x38, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4, 0x3}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xe, 0x8001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80, 0x189}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x70}, 0x1, 0xba01}, 0x8800) 5.787807125s ago: executing program 3 (id=1426): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000c502000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) 5.750017135s ago: executing program 2 (id=1427): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r1, 0x0) listen(r1, 0x9ce2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 5.681764605s ago: executing program 4 (id=1428): r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f00000010c0)="9c", 0x1}], 0x1, 0x6) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000001480)={0x60, 0x3, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x81, &(0x7f0000001380)=[{0x2, 0x9, 0xc23a}, {0x9, 0x7, 0x100000000}, {0xffffffff, 0x100000001, 0x8000}, {0xda, 0x1, 0x80000001}, {0x2, 0x7, 0x7}, {0x0, 0xf, 0x100000000000}, {0x6, 0xe58e, 0x7fffffffffffffff}, {0x80, 0x7a9d4f37, 0x40}, {0x3, 0x57d5, 0x95df}], 0x9, 0x800100000000, 0x11, 0x0, 0x8, 0x2e}) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000440)={'comedi_parport\x00', [0x4e27, 0x1f, 0x3, 0x7fffffff, 0xe7, 0x8, 0x8, 0xa82, 0x40, 0x100, 0xcf3, 0xb, 0x400, 0x2, 0x3, 0xffffffea, 0x10001, 0x10087, 0x2, 0x0, 0x2, 0x289c, 0xf23, 0x2000007, 0xb, 0xbfd, 0x3c, 0x5, 0x6, 0x0, 0x80000000, 0x3]}) r4 = mq_open(0x0, 0x40, 0x1a2, 0x0) mq_notify(r4, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r5, 0x80044dfb, &(0x7f0000000040)) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r6, @ANYRESDEC=0x0], 0x8c8}}, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000008300)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r7}, 0x38) statx(r1, &(0x7f0000007f00)='./file0\x00', 0x0, 0x2, &(0x7f0000007f40)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000008040)) r8 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) r12 = shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_SET(r12, 0x1, &(0x7f0000000180)={{0x3, r10, r11, r10, r11, 0x40, 0x6}, 0x9, 0x9, 0xd, 0x9, r9, r9, 0x4}) 5.519517292s ago: executing program 0 (id=1429): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000c502000000000000628f25ba73000000", @ANYRES32, @ANYBLOB="0000000000000000660800000000000018000000000000000000000000000000360a0200000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000ff7f0000000000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000017007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) r3 = dup(r2) r4 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r4, 0xb, &(0x7f0000001080), 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x0, 0x4000}, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = accept4(r5, 0x0, 0x0, 0x0) read$alg(r6, &(0x7f0000000340)=""/190, 0xbe) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) userfaultfd(0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r7, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r8, 0x400448ca, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', r3}, 0x18) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x40, 0x40, 0x101}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) 5.486571128s ago: executing program 2 (id=1430): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGABS20(r0, 0x40044591, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 5.014432295s ago: executing program 4 (id=1431): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f0000005700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x2e, 0x1}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) write$proc_mixer(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='VOLUME \''], 0x2a) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, 0x0, 0x2, {0x2, 0xff, 0x3}, 0x2}, 0x18) 4.711498163s ago: executing program 4 (id=1432): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1b, 0x61, 0xe3, 0x8, 0x16d0, 0x10a9, 0x3052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x7f, 0x88}}]}}]}}, 0x0) syz_emit_ethernet(0x88, &(0x7f00000001c0)={@broadcast, @multicast, @void, {@mpls_uc={0x8847, {[], @ipv6=@tipc_packet={0x2, 0x6, '-W]', 0x52, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @loopback, {[@routing={0x33, 0x6, 0x1, 0x4, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @private2={0xfc, 0x2, '\x00', 0x1}]}], @payload_conn={{{0x1a, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x2, 0xca, 0x0, 0x0, 0x8, 0x5, 0x0, 0x5, 0x2c0, 0x4, 0x4e21, 0x4e24}}, [0x0, 0x0]}}}}}}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xe6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x20, 0x7, [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x3, 0x1, 0x2, 0xc, {0x9, 0x21, 0xaf8, 0xd, 0x1, {0x22, 0xb08}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x0, 0x9}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0xc0, 0x10, 0xfd, 0x10, 0x2}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x441}}, {0xd9, &(0x7f0000000340)=@string={0xd9, 0x3, "75cc51c1cfe19afa5ec4f8d81d9cfe244d0b6b22a73ea90005f89cef08b818b283593b01fe5750ba373f13de16f1433e7209c790881c51efd4a129b0d14d46d98b8a289dcda16f95cd27ddb44c6b3dd32be95c216f77e8317d1721301dcee74bd4667170d594ff3c37030359e53b94d2366be30055ab0d9bc5ca21509bfb63187d8b7616e2e97a051970764051ee3bf4cf39c4fb5f58b2428995d860317360a332bb3f467cd98654f7ac12aa02112db715ebcc2e6776fa5104012ae100fec58fc5e961c8b2cc80f3eb96cba19fe7c0cf67526043020137"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x810}}, {0x10, &(0x7f00000002c0)=@string={0x10, 0x3, "d948c302ef693d9177f955a721d4"}}]}) socket$inet_udp(0x2, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/mdstat\x00', 0x0, 0x0) getpgrp(0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={0x0, 0x24}}, 0x20000050) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4010, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x24}}, 0x0) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) 4.634070088s ago: executing program 1 (id=1433): r0 = syz_usb_connect(0x5, 0x2db, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x99, 0xb4, 0x5a, 0x10, 0xaf0, 0x6731, 0x9106, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c9, 0x2, 0x44, 0xf, 0x20, 0x54, [{{0x9, 0x4, 0x31, 0x55, 0x6, 0x2a, 0x9b, 0x59, 0x40, [], [{{0x9, 0x5, 0x8, 0x4, 0x3ff, 0xf, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x1}, @generic={0x7d, 0xb, "51ed3b316aeaa05fa22f81c73ea4d75cf46d3f4eb9b7cbbcab4692b40923fea4bf668e761979a0569c643c01265bb19e7c3ecaa6c4e4378dba8f245f3e835c5cf6bb623e3bb31d541b33ad245717183ac7ba4c42a329c8b73619036b099b322a09eaab9b65fa0d1cea696d6fb74239a9b477dacc5fbf6199379e6f"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x400, 0x6, 0xbe, 0x0, [@generic={0xed, 0x23, "e0b67fc8172b9297901234c3e92c279f039d3ddc8fe6de885daf30e3a3a069d76b828aa17da7f6e36efe85beea9c9b148be1965b08169f4cc2f8d7b94e4aaec712f06238035ce56278dbf2d0f344c811a4cb35dfad2bb8654902c8379ee14859962b7ee3dfae359a7b6d6dbb5f85f5c9547124b4a99dd18a2995debe35d9a5f34b4a9046dbbf99156e17b8bc04dc5e068a0ecc6e29ddab5866821805608c11895f17c92b3006aff9ff7f415c42bc2f6a2479631f108ecc78d6d0be1e790aa242d733f045865b48f6ba7b29ff2e83b56b5897c6430c8e4cab2417703083ba12fa6dfad2ec5223e65345478a"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x2}]}}, {{0x9, 0x5, 0x4, 0x4, 0x20, 0x5, 0x2, 0x0, [@generic={0xb3, 0xb, "4acf7a36e33e9e4e6d7e756994d861652a39f03fd0516e6a03cd8db3dc73a3732c9fc9a859d9185ed6fd8a1e2605488db78538efef6eae4e32b77e5db14f3c2550620c538c4a7da796107819205aaeab76763d3796f23bf70b550629cb93e84b8e1dfa27fe1ac54ceb17cb79aedd8ce9ad57f4a272470df2afdeda484bc2c7193b7e829c57bc7cc462bfe2e073b799a42cdefec49082b3cc8fa8df7bc7bde6339fb19ca973331aeacd39130b8adae21d1e"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x40, 0x4, 0x4, 0x6, [@generic={0x3a, 0xf, "ab358609a73e1a016a9fa1012ca7310985879a7ce6b3913fe426f584895681ee7d59951c518258256f562c927b26b3788308ab5b95654b03"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x3}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x6, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}, {{0x9, 0x5, 0x4, 0x3, 0x3bf, 0x6, 0x5, 0x8, [@generic={0x5, 0xb, "067741"}]}}]}}, {{0x9, 0x4, 0x8b, 0x56, 0x0, 0x27, 0x5e, 0x4c, 0xd}}]}}]}}, &(0x7f0000000d80)={0xa, &(0x7f0000000bc0)={0xa, 0x6, 0x110, 0x8, 0x4, 0xf9, 0xff, 0xe}, 0x21, &(0x7f0000000c00)={0x5, 0xf, 0x21, 0x1, [@ssp_cap={0x1c, 0x10, 0xa, 0x10, 0x4, 0x7fff, 0xf, 0x1, [0xff00c0, 0x3f00, 0x0, 0xffc000]}]}, 0x2, [{0xcc, &(0x7f0000000c40)=@string={0xcc, 0x3, "db5f726cef611a20f9d77f7130cd5c87b598defe5e9a32ef39e8b4d3b342ecff51b575e30cc79f0cd84f86843a9c0fc9a23a2fe933e381490d585d40cf89b9bee7660871ff21d7aaacb34d86845cb2d9579417d1ebb2b8372bd3b2a999e540b780e2b5d5a93369c2d9bd6aedb0d3bdfa2c55cddba74fd504c99ac22d931b3361f28d1181f2f2960b7e7e5fe78523afad358668556b6a01d5b830de756b5c4641c90dcd51e37dfa4566daf4a02c34e79d251b1fa7cd79fa6bfdb10dd936761acdd75021db5e46857613c9"}}, {0x3b, &(0x7f0000000d40)=@string={0x3b, 0x3, "c18913d222eda3fd40ba4a33b034c4fba9a8eff8298037ebb6cbdc67736e72e5c15245a89033b169341d7fbbc1b1caacc01f9353052ccfda19"}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, &(0x7f0000000dc0)={0x40, 0x9, 0x9a, {0x9a, 0x31, "2f9fd69de8f983e847e109ca7435da3d0076bf61a469f06da8125994d28f5e62c58588fb8fa356b14a0b67c656d7f6eb01f107ff36c116b930c1d0e61bbde0e1f48fdfe502b7ff9a8de154a131745b69c626cebaf6a79c1e6023f68b830e4ef885301c882784597df492f4a3b43951f75aa9fe23a6be14a7a18e119d234a48edc026214d9b5ec39685b35af59c27755c1361970996959115"}}, &(0x7f0000000e80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1407}}, &(0x7f0000000ec0)={0x0, 0x22, 0x19, {[@local=@item_012={0x2, 0x2, 0xa, "76a1"}, @local=@item_012={0x2, 0x2, 0x0, "7988"}, @local=@item_4={0x3, 0x2, 0x8, "0188e601"}, @local=@item_012={0x2, 0x2, 0x7, "fd2f"}, @local=@item_4={0x3, 0x2, 0x0, "e8913778"}, @global=@item_012={0x0, 0x1, 0x2}, @global=@item_012={0x1, 0x1, 0x3, '$'}, @main=@item_012={0x2, 0x0, 0x8, "a8f9"}]}}, &(0x7f0000000f00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x80, 0xff, 0x1, {0x22, 0x620}}}}, &(0x7f0000001240)={0x2c, &(0x7f0000000f80)={0x20, 0x3, 0xc3, "0c8f565caf66a14b0543076b9f73573ae637758e90de75120fc5a05615f90c09f036f29c752b9cb032013cb6b86165bfad42896d97788b3feed421ae431e99d910a6f5f95194432fbd2b90e69e7e0a6ab997f02694addec6d825fe47aa549a7887dd64a67ab0138d3274cdf7fc3a47aa7e0075b558ae579e0dadd353490fbcfb7d494e1573cb73b8bf60855b80b8c25f797a44855249c41df0a80432303631eeeb12da7a43a6b16b5f4ac3521461706c25f889ff468b1e98b78ad2e87753a790bf1623"}, &(0x7f0000001080)={0x0, 0xa, 0x1, 0xfe}, &(0x7f00000010c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000001100)={0x20, 0x1, 0xd4, "31421ea8e139fe84b88be841c6a56a6284fc95f95da903c301d845f896f2d163407af6d556aefb86a83d8cbf2917be9ab3498b70f4dd5f57a1a3faafdd4bdfcde29b053f9a52b539608726602422e7a65608e1960a44ed282209f0859a441ada907be9fa1134cd3a993ee6573703a8a7c572b4798156b323af5faebaddfa7e799763a164edd7024c89f3ab230705fa5ceda2719f14a41cb01be9489b5c99ae48f41dd63b80f9a9ef55afeb8b1a2cac350010423902f8d082093d1a6fdd77f124e66d7596c2ff3bceae7ee0b0d44a86fdd3c27ae5"}, &(0x7f0000001200)={0x20, 0x3, 0x1, 0x54}}) setxattr$smack_xattr_label(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)='security.SMACK64MMAP\x00', &(0x7f0000001cc0)={'/dev/dlm-control\x00'}, 0x12, 0x0) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000001fc0)={{0x12, 0x1, 0x38c74672c4e89022, 0x0, 0x0, 0x0, 0xff, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x50, 0x8, [{{0x9, 0x4, 0x0, 0x7e, 0x1, 0x7, 0x1, 0x2, 0xff, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x0, 0x2, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x50, 0x6, 0x1, 0x4}}]}}}]}}]}}, &(0x7f0000002440)={0xa, &(0x7f0000002000)={0xa, 0x6, 0x200, 0xa, 0x6, 0x3, 0x10, 0x9}, 0x63, &(0x7f0000002040)={0x5, 0xf, 0x63, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x9bbe86af85603217, 0x3, 0xf7, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x5, 0x4, 0x60}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "3d0fd9cadbde27b5af6da2c184358a6c"}, @generic={0x2e, 0x10, 0x4, "cb0cc986f99fe5423f3951ad0b6cd31347c67b9b3e3faf82097ef0575b2ec415b0da1c5ebbb7199a784bcd"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x28, 0x6, 0x0, 0x3}]}, 0x7, [{0x4, &(0x7f00000020c0)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f0000002100)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000002140)=@lang_id={0x4, 0x3, 0x1801}}, {0xe9, &(0x7f0000002180)=@string={0xe9, 0x3, "0203942b57d82aff724a2275655d03cf978588d2e6eaea7a823ef2d6a7a6ba30f672ebb3b317d47ea8585f95abe56143a1046ee9c596d6bb0dbe6b88c7cb687958a7d5e38d44308d8dec85eaf47828fb178d8f9977769423a2e285081929ceddef31073d2abc3c50fe90dc27cec73df1987b4f3d57e56d7902ffe8620820b7f93b2d5e0f2b122a2b15719bc7d7f9fd8cd67b55124adb97325a395d2e173bbbd94c26a353999a39c07dd3251882a9307051acde237258913e45917efeadc7d0bb78ab9e753dc1ec4dae99fc3bb567d9b8cbb47ae1200b62d245d75afce9454240d3421ea950f95c"}}, {0xc1, &(0x7f0000002280)=@string={0xc1, 0x3, "7b43032acd3f40b363eb7153264a406ab0ed5bc672ebfc43d0643a099ce3bc06272106339e7207f173b5f44b0249a464b78b09583578b60c502e06bbed4b1d6576b9ecfd330d8fcdee77f0a5ecbe75d3ef79de07b5f12f534175e793e8b041c85bcee8e9b2d0b57ee6eba0c42c989ef37f760eb96f7c73c3b13dd70ea041ad327139e59fbdc0e1cdcadbb28fab6effd9b2bc0554250314ebd9dfcb1085cceb0d280aed7e3524f2b408a8e745cf993040190413abe7d83dc76ee1f67161dd84"}}, {0x4, &(0x7f0000002380)=@lang_id={0x4, 0x3, 0x1407}}, {0x5d, &(0x7f00000023c0)=@string={0x5d, 0x3, "63e9cdf6e6b24145d40888a438375ece9e4499b8cd2f3887f2b666448586731354bc4f2d215e290e18fa2319d6050beb1da0e11ea136da10fbf1ae7504a3deda666c25a8dce680775fce3797c63a53492eb18c77f74bd78401a28c"}}]}) 4.497153753s ago: executing program 0 (id=1434): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0xe, 0xc, 0x32315241, 0x5, 0x568d, 0x3, 0x2, 0x8, 0x1, 0x1, 0x1}}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000000c0)=0x100000001, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb90402200800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600200001401c00010003580461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3b8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6f4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 4.407300632s ago: executing program 3 (id=1435): open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x8000001, 0x0, 0x0, 0x0, 0x4040007}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r1]) r3 = syz_open_dev$evdev(&(0x7f0000000100), 0x4, 0x200) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000180)=""/4096) syz_usb_connect(0x2, 0x4f, &(0x7f00000012c0)={{0x12, 0x1, 0x311, 0x6, 0x26, 0x98, 0x20, 0xc52, 0x2843, 0xca31, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x1, 0x8, 0xd, 0x10, 0x5, [{{0x9, 0x4, 0xf1, 0x1, 0x3, 0x56, 0x5c, 0xec, 0x3, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x0, 0x7f, 0x1002}]}, @hid_hid={0x9, 0x21, 0x1ff, 0x6, 0x1, {0x22, 0x724}}], [{{0x9, 0x5, 0x2, 0x0, 0x20, 0x9, 0x9, 0x8}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x9, 0x9, 0x24}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x1, 0x80, 0x5}}]}}]}}]}}, &(0x7f0000001740)={0xa, &(0x7f0000001340)={0xa, 0x6, 0x201, 0x3c, 0x9, 0xf, 0x8}, 0x90, &(0x7f0000001380)={0x5, 0xf, 0x90, 0x2, [@wireless={0xb, 0x10, 0x1, 0x0, 0x2, 0x6, 0x0, 0x7, 0x81}, @generic={0x80, 0x10, 0x3, "6685a6c8f0a1d79e9fad1ef32fcf2c2c5b4393e0fbff4c21cf45fc126f4e6165fccd726b7a3bba0a89986457ea25d0ff74a78f460c1fbbffd9c200905e0662dbe3ab53e2e39999580081139cf27b39f6fd75f0387f74be1fed170dfc609ab65fd46309372363589d4538561529cbafb4e634cc05e351eae514a19c5fee"}]}, 0x5, [{0x17, &(0x7f0000001440)=@string={0x17, 0x3, "7cd439429627c770dbaab6df360e9c27f7e9c4089a"}}, {0xe0, &(0x7f0000001480)=@string={0xe0, 0x3, "07eb95b995f7ea23c8f221dc2c3fe768248c41391a6e2114b9f3bd76b893ffa4f6d35610e234230e0e6225c045a64caf96c8494e8b7188821e6cf3943d1b357a5efdd6849728f67011260bbc49cc47b24bc0d68e659c5c73c18edbbb2e21fd8a3f1d74f7535647f344224e5e3814fac2c2d950661a536e6ecf9aadb96236504d3e22e1b3f1124942ba26b7f1b695c78a55551fe2d648db32d1b7be00dd62620f4dd5636eaea379f7b514f520db6796bebb161f30dcb34cc794c4f323efc6194f2ad3b9cc4d20f57a8e66a13ff2d07901d4ee266742d329c64d2380175ee8"}}, {0xaf, &(0x7f0000001580)=@string={0xaf, 0x3, "fa47a93a086f080c902e75c7bcb1a179e52293c41320f133e03aff7f0365084a3c62c7433e681ae3f84630fb06dcf26ef9942e8d7c3fa7d9ccb92272e5be6bdade7cf5b4ab689da84fc7418d075a299b065bb79b86d39937c692e15858187a36fd177e7137859ec50d35538e590c42d7175eda66ff24a7b9ab30a080cea1a5ba3ee05683ec004962493ceade314dbe597b1debaca4e03654b57f6e07795b0a502c3a4b688af5c4e11f7afb5639"}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0xc09}}, {0x9f, &(0x7f0000001680)=@string={0x9f, 0x3, "56c053082130558388d4b3c3d36830da4a077657392eba88ea027f22969198f2f2f85838a74cf87da5d7a4a4ee9e3364a141e3f5e87c562ffc5f2d1cf4c6af35e73c053fc86239ebf3daad4d658157ac187cb6d34bb08d0fff898eb65ac36fe2cf91bed4cd1f8c85253905765dac79f1b4f4d6f2fb3d5c05bf2d9a46b7fd8707fb06439096bd3bc7d202cc51f0d4dced1223cf4b3e9473520eab82d805"}}]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = io_uring_setup(0x79c4, &(0x7f00000001c0)={0x0, 0x701e, 0x400, 0x2, 0x64}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x1) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x40000, 0x6) recvfrom$unix(r5, &(0x7f0000000100)=""/133, 0x85, 0x40010101, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x2c, r8, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004024}, 0x30) r9 = io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0x9c3d, 0x0, 0xffffffff, 0x2}) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r10, 0x545c, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000080)={0x0, 0x0}) 4.400051569s ago: executing program 2 (id=1436): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = dup(r0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="18000000000000001001000002"], 0x28}, 0x20004804) io_setup(0x2017, &(0x7f00000009c0)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000002000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x2) r7 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r12, r11}}, 0x18) writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r6, 0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000001800)=""/201, 0xc9}], 0x1, 0x0, 0x1}) io_uring_enter(r7, 0x847ba, 0x2000, 0xe, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x5) r13 = syz_open_dev$sg(&(0x7f0000000000), 0x9a6, 0x800) ioctl$SCSI_IOCTL_GET_IDLUN(r13, 0x5382, &(0x7f0000000040)) read$FUSE(r5, &(0x7f0000005380)={0x2020}, 0x2020) 3.449637576s ago: executing program 0 (id=1437): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0xe, 0xc, 0x32315241, 0x5, 0x568d, 0x3, 0x2, 0x8, 0x1, 0x1, 0x1}}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000000c0)=0x100000001, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb90402200800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600200001401c00010003580461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3b8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6f4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 2.337807683s ago: executing program 0 (id=1438): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000003c1a302c77d7770c01000600000000000275db1c7daf73be8eda03c574791a8b0ea42c3b30580ed2c3480e248147d84ef207e1100dc967075099e6b76f542b23090000000000000087b08c5295aa2d55f4b7a56a9311980b59d55c9d32e891e6a4aa7daa0a1960199a772c9fbc83fe5ad981d7ed22b220e9c9ccacc567546d14099f32fe4eb7d03c2b07be30c1e5c3f4fefa0d2c90fefab536f09e13cf7782e9", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8000000) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x48, 0x0, &(0x7f0000000040)=[@clear_death={0x400c630f, 0x3}, @acquire_done={0x40106309, 0x1}, @request_death={0x400c630e, 0x1}, @release={0x40046306, 0x2}, @dead_binder_done], 0x0, 0x0, 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000dc0)={{0x1, 0x3, 0x9, 0x800, 0x5, 0x5}, 0x8d, [0x7, 0x93b, 0x6, 0x1, 0x1, 0xb8a, 0x2f, 0x100, 0x5, 0x7, 0x7, 0x5, 0x41d4, 0x83, 0x4, 0xffffffff, 0x9, 0x1000, 0x77e4, 0xffff0c56, 0x3, 0x1, 0x0, 0x40, 0x9, 0x200, 0x69, 0x204, 0x0, 0x6, 0x3, 0x7, 0x8, 0x8, 0xa522, 0x100, 0xfffffff8, 0x80000001, 0x0, 0x40, 0x1, 0x6, 0x1, 0x7fffffff, 0x5eb9, 0x5, 0x9c05, 0x800000c, 0x401, 0x4, 0x75, 0x817, 0xb, 0x3, 0xda90, 0x7, 0xf, 0xbc4b, 0x106, 0xfd, 0x81, 0x6, 0x101, 0x39, 0xffffff7f, 0x6, 0x5, 0x5, 0x77, 0xfffffffd, 0x0, 0x9, 0x73f, 0x5, 0x8, 0x4, 0x3, 0xffffffff, 0x5, 0x26be23d3, 0x7, 0x2, 0x9, 0x8, 0xdd2, 0xdd2, 0x3, 0x4, 0x2, 0xfff, 0x80000001, 0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x5, 0x2, 0x1, 0x80000001, 0x7, 0x0, 0x40, 0x5, 0x101, 0x8, 0x9, 0x334c230c, 0x6, 0x4, 0xfffffff9, 0x8, 0x3, 0xffff0002, 0x7, 0x2, 0xffffffff, 0x4, 0x3, 0x4, 0x4, 0x3f, 0x81, 0x3, 0x400, 0x4, 0x984, 0x1, 0x6, 0x7, 0x8001, 0x1ff, 0x2a3, 0x6d, 0x1, 0x10000, 0x5, 0x80000000, 0x1d01e, 0x1, 0x3, 0xfffffffb, 0x8, 0x63, 0x400, 0x5, 0x401, 0x4, 0xfff, 0x0, 0x9, 0x3, 0x8, 0xfffffff9, 0x2, 0x80000000, 0x3, 0xc, 0x1, 0xad, 0x100, 0x144, 0x2, 0xfffffffc, 0x2, 0x5, 0x0, 0x5, 0x9, 0x1, 0x4, 0x1000, 0x974, 0x5, 0x2, 0x8, 0x5, 0x88, 0x1000, 0x0, 0x1, 0x2, 0x5, 0x9, 0x0, 0x57a, 0x0, 0x0, 0x6, 0x9, 0x5c, 0x6, 0x9, 0xd22, 0x12, 0x7, 0x10, 0x8, 0xffffffff, 0x2149, 0xf, 0x26a02622, 0x7fff, 0x8, 0x8, 0x7ff, 0x5, 0x8, 0x81, 0x8, 0xff, 0x5, 0xfffffffa, 0x2, 0x2, 0xffff, 0xf, 0x5, 0x7, 0x5, 0x100, 0x1e06, 0xf, 0xdf2, 0x0, 0xbb, 0xfff, 0x400, 0x2, 0x80000000, 0x7, 0x8, 0xf9b, 0x8, 0x7ff, 0x7, 0x3ff, 0x630a, 0x5, 0xcff, 0x9, 0xb7, 0x1, 0xff, 0x4, 0x5, 0x10, 0x1, 0x92a, 0x3, 0x5, 0xd, 0x5, 0x101, 0x6, 0x7fff, 0x3, 0x3, 0x4, 0x0, 0x7f, 0x200, 0x20, 0x7, 0x1000000, 0x0, 0x7f, 0x53, 0x8, 0x8, 0x5, 0x2, 0xf, 0xd81c, 0x840, 0x1, 0x9, 0x2, 0x81, 0x9, 0x3, 0x5, 0x1000, 0x8, 0x47, 0x94, 0x7, 0x8, 0x8001, 0x56f71051, 0x1, 0x867, 0x3ff, 0x40, 0x6, 0x3, 0xfff, 0x5, 0x197, 0x9, 0x6, 0x5, 0x6, 0x7, 0x0, 0xffff, 0x3, 0x1ff, 0x400, 0x3, 0xd42, 0x9, 0x5, 0x1ff, 0x4, 0x9, 0xbec, 0x5, 0x7, 0x3, 0x5, 0x64000000, 0x2, 0x1e, 0x3a, 0x6, 0x5, 0x18000, 0x2, 0xffff, 0x9, 0x6, 0x9, 0x0, 0xe4f, 0x67c, 0x27b7, 0xe, 0x9, 0x9, 0x5, 0xd, 0x5, 0x6, 0x76, 0x9, 0xc4fe, 0x9, 0x3, 0x4, 0x8, 0x87, 0x1, 0x4, 0x6, 0x40, 0x9, 0x8, 0x1, 0x6, 0x8, 0xc75e, 0x4, 0x6, 0x1b, 0xfd3, 0x2, 0x3, 0x9, 0x10, 0x4, 0x5d2f, 0x5, 0x1b, 0x3ff, 0x5, 0x8, 0x6, 0xc000000, 0x5c, 0x9, 0x541b, 0xce, 0x6, 0x4, 0x69f, 0x3, 0x5, 0x7, 0x4, 0x200, 0x7, 0x8, 0x2323, 0xfffffff7, 0xffff, 0x7ff, 0x4, 0xd, 0xffffff42, 0x89, 0x80000001, 0x3ff, 0x3, 0x554, 0x80000de, 0x0, 0x400, 0x3, 0x9, 0x800, 0x7cb3aca3, 0x6, 0x6, 0x4, 0xf8000000, 0x1, 0xfffffff9, 0x9, 0x0, 0x0, 0x3, 0x10000, 0x4, 0x3, 0x0, 0x8, 0xbb, 0x5, 0xf548, 0x3, 0x36c, 0xffffffff, 0x10, 0x676, 0xe67, 0x88, 0x808, 0x560, 0x6db6, 0xa7b, 0x2, 0x4, 0x9, 0x3, 0x4, 0xffffffff, 0x6, 0xed2, 0x24bdaad2, 0x9, 0x4, 0x3, 0x1, 0xd599, 0x2, 0x6c51, 0x2, 0x0, 0x0, 0x2, 0xfce6, 0xf, 0xcd0, 0x4, 0xf, 0x0, 0x9, 0x5, 0x200, 0x6, 0x5, 0x2, 0x7, 0x17, 0xc36, 0x0, 0x8fbb, 0x3, 0x5, 0x0, 0x8, 0x8, 0x1, 0x8, 0x1000001, 0x45d8, 0x9, 0x0, 0x60000, 0x7, 0x2, 0xfffffff1, 0x3, 0x2, 0xfdfffd67, 0x2, 0x4, 0x5, 0x3, 0x800, 0x10, 0xa, 0xb12c, 0x5ce, 0x1, 0xfffffffd, 0xf9c8, 0x0, 0x80f4, 0x10000, 0x3, 0x8, 0x2, 0x7, 0x5, 0x8, 0x401, 0x7, 0x10, 0x0, 0x6b, 0x100, 0x8, 0x2, 0x2, 0x5273, 0xe45f, 0x10, 0x0, 0x8, 0x4, 0x7, 0x7, 0x6, 0x4, 0x8e8b, 0x5, 0x3, 0x7, 0x3, 0xe535, 0x9, 0x5, 0x6, 0x0, 0x3, 0xff, 0x7fffffff, 0x5, 0x1, 0xa, 0x4, 0x1, 0x31, 0x0, 0xee1, 0x10001, 0x3, 0xfffffffc, 0x4, 0x1, 0x6f9, 0x7, 0xb26c, 0xb, 0x0, 0xfffffff3, 0x8, 0x8, 0x3, 0x6, 0xfd, 0x3, 0x3d, 0x6, 0x80000001, 0x5, 0x7, 0x1, 0xffffffff, 0x6, 0x3d29, 0x4, 0x7, 0x8, 0xb04, 0x3, 0xea6, 0x9, 0x101, 0x4, 0x1400, 0xfffffeff, 0x7, 0x2, 0x4, 0x8, 0x7, 0xe, 0x2, 0xc, 0x2, 0x2, 0x64c1, 0x80000000, 0x200, 0x2, 0xfffffffd, 0x1, 0x91, 0x8001, 0x401, 0x781d, 0x80, 0xfffff5b0, 0x8, 0x3, 0x8, 0xfff, 0xcd800000, 0x9, 0x6, 0x0, 0x5b5, 0x7, 0x10, 0x2, 0x1, 0x10001, 0xc, 0x9e9, 0x53, 0x8001, 0xc, 0xc00, 0x40, 0x401, 0xf2a6, 0x7, 0x3, 0x2, 0x7, 0xfffffff7, 0x0, 0x3ff, 0x3, 0x7fffffff, 0x4, 0x0, 0x1, 0xf, 0x7, 0xa84d, 0x3, 0xaf, 0xaf72, 0x5f, 0x1, 0xe, 0x6, 0x9, 0x5, 0x7, 0x3, 0x5, 0x3, 0x40, 0x1000, 0x75f1, 0x4, 0x3, 0x1, 0xfffffffd, 0x4, 0x8, 0x10, 0x80, 0x2, 0x6, 0x0, 0xe, 0xc, 0x3, 0x2, 0xd, 0x5, 0x8, 0x6, 0x8, 0x3, 0x6, 0x5, 0x3, 0x101, 0x8, 0xbd, 0xa, 0x8, 0xffffed34, 0x8000, 0x2, 0x7, 0x7, 0x55f47279, 0xd, 0x3b, 0x5, 0x8, 0xffffffff, 0x4, 0x81, 0x6, 0xb, 0x2, 0xa53, 0xff, 0x0, 0x2, 0x5, 0x3233, 0xff, 0x6, 0x2, 0x9, 0x1, 0x0, 0x3ff, 0x5, 0x8, 0x40, 0x0, 0x40, 0x88, 0x5, 0x80, 0x4, 0xd0000000, 0x8, 0x4, 0x5, 0x5, 0x7, 0x0, 0x0, 0x76b, 0xbb, 0x2, 0x5, 0x7fff, 0x9, 0xa, 0x5, 0x80, 0x4, 0x8, 0x8, 0x1f, 0x1, 0x3, 0x4, 0xd126, 0x7, 0x5, 0x0, 0x0, 0x8, 0x4, 0x1, 0x5, 0xfffffffa, 0x8, 0x270b, 0x5, 0x7fff, 0x4, 0x5, 0x6, 0x3, 0x4, 0x13f, 0x0, 0xc906, 0x6, 0x100, 0x4, 0x3, 0x3, 0x7f, 0x2b, 0x4, 0x3, 0x3, 0x8001, 0x46f, 0x19f1, 0x6, 0x20, 0x2, 0x2, 0x6, 0x5, 0x5, 0x401, 0x5, 0x6, 0x4, 0x7, 0xb, 0x200, 0x6, 0x9, 0x7, 0x3, 0x1, 0x7f, 0x4, 0xc3b, 0xfdf5, 0x0, 0x3, 0x0, 0xf, 0x1, 0x800, 0x4f35, 0x1, 0x18, 0x5, 0x0, 0x6, 0xaa5, 0x800, 0x9, 0x7, 0x800, 0x8, 0xfffffffb, 0xff, 0x5, 0x1000, 0x8, 0x81, 0x6, 0x80, 0x9, 0x8, 0x5, 0x8, 0x8, 0x100, 0x5, 0x10, 0x3, 0x7, 0x82, 0x4, 0x40, 0xabde, 0x1, 0xb, 0x8, 0x5, 0x8, 0x7f, 0x100, 0x8, 0x9, 0x6, 0x80000001, 0x2, 0x8, 0x2, 0x7fff, 0x3, 0x6, 0x4, 0x5, 0x3, 0x0, 0x1, 0x8, 0x59, 0x1, 0x0, 0x48, 0xaa16, 0xc, 0x401, 0x1, 0x401, 0x8, 0xc11, 0x4, 0x0, 0x7, 0x2, 0x7f, 0x0, 0x1, 0xc0000, 0x5, 0x4, 0xef47, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0xe14f, 0x5, 0x7, 0x8, 0x7fffffff, 0x7f, 0xffffffff, 0xffffff88, 0x400, 0x7fffffff, 0x10, 0x5, 0x9, 0x5, 0x0, 0xff, 0x0, 0x8, 0x3, 0x5, 0xfffffffc, 0x9, 0x11, 0x9, 0xfffffffe, 0x40, 0x3, 0x7, 0x0, 0x1, 0x2, 0x6, 0x81, 0x4, 0x401, 0x6, 0x5, 0x3, 0x0, 0xd, 0x6, 0xc, 0x2, 0x1, 0xfffffe5c, 0x40, 0x0, 0x9, 0x24, 0x1ff, 0x4, 0xe92, 0x5, 0x6e3, 0x4, 0xff, 0x0, 0xdf, 0x5, 0x6, 0x100, 0x3ac9, 0x10001, 0xae27, 0x7f, 0x81, 0x7, 0x7fff, 0x0, 0xb, 0x4, 0x1, 0x1, 0x0, 0x9, 0x331d, 0x5, 0xb9, 0xfffffff7, 0x4, 0x4, 0x9, 0x6cf3, 0x8, 0x7, 0xf, 0x9, 0x9, 0xffff, 0x8000, 0x1, 0x2, 0x2, 0xdc0, 0x5, 0x100, 0x9, 0x1, 0xfffffff8, 0x800, 0x3, 0x0, 0x9, 0x644a, 0x93, 0xb0, 0x2, 0x3ff, 0x800, 0xfffffff7, 0x2, 0x0, 0xff]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000005000000090000008400000044010000", @ANYBLOB="0000001406000000000000007cdaf1142bbffa05813c3080b9ce0b71274fa2ce9a7f9ed300000000fe2d80d0722a967fb88d3e6ad536f513c8f71bd50ce5ea3e1aff67a57221f00dbde29aa70ff48a623c3cc645e87e96a23e972491d39e68a9ded3dc4892182cca79ea0aa3d82b482897871c81cc5a499e8dcc01f087326dbefaa9dbc23a6a6f733c25b76d78907470f23ee08d9571725b32240b81a49b6cc560b4255d1926ca8e7bfb62b7f09391d42b360086812c0be46b40d8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000d40), 0x21800, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r4}, 0x38) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000c57000), 0x0) ioctl$UFFDIO_ZEROPAGE(r5, 0xc018aa06, &(0x7f0000000380)={{&(0x7f00007db000/0x2000)=nil, 0x2000}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0xffe0, 0xf}, {0xffff, 0xc}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 498.653573ms ago: executing program 3 (id=1439): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="c04b82360f69574fde5d", 0xa, 0xfffffffffffffffc) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="81282648ecd39b624504d3feb15791aaf388d259e6f49dbdf407ebfc6b48edc2a8c2aa846967f9b4fdc62747e2412530cb5f8174b4a9b61555bb682fb1153c7c04a1ae2859b4e0381d0d939d431b2e201e61c8eba83414f4d2824099e3a825eb174918a8efe75de17b31f43c130fb31a93517e311bd3d67eef7057fbc6149ce00ae01499eb64056633fd6aa81637fab351e0da5708", 0x95, 0xfffffffffffffff9) r2 = add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="54988b44bb86a5409a6e0041933d8ad649bd70b88d70420069b6c828195656b5662622eba457d5a4c5df5307b7e90a766915deab91acb70f53a60bb99e4ae452820b7a8e258a65e20c6ef46141014f59933beaa3c94b59dbdcbbca224761dd1657445f3406e221409ec47e09bf15be58a3a9aaa90d4055ee880bb76513973b8fc55f1c3800f1ab6f81824448f8961cf05202c71ac183c9dcd54e9d62e207023b2875fcbaacf3", 0xa6, 0xfffffffffffffffa) keyctl$dh_compute(0x17, &(0x7f0000000340)={r0, r1, r2}, &(0x7f0000000380)=""/172, 0xac, &(0x7f0000000540)={&(0x7f0000000440)={'sha224-ssse3\x00'}, &(0x7f0000000480)="6914afd9efa6c600618a6dc7fda817deb36bf0f451b3da686e63de2d0ba5fbdd43e047f1aa524be7a0d0b3ce9ed29f9d1b60adeec013e87f962314288c8e5e3e9dbae669234606648dd8abe72c98f6b71b7044169a2457a84a557354a41b22c9b64fd0d0189a17a77388766a21e5e6cbdea25f156e334ed29b443a4f096fb9f9888335d6dcf67ac067dc116b5e25fa39fe66cb1673ae87f9ab", 0x99}) add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000600)={0x1, 'vcan0\x00', {}, 0x800}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000640)={'veth1_to_bridge\x00', 0x2000}) syz_usb_connect(0x0, 0x174, &(0x7f0000002c00)={{0x12, 0x1, 0x201, 0x36, 0x8c, 0xda, 0x10, 0x413c, 0x81ba, 0x403, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x162, 0x1, 0x8, 0xe, 0xa0, 0xc, [{{0x9, 0x4, 0xe8, 0x3, 0x2, 0x2, 0x6, 0x0, 0xd, [], [{{0x9, 0x5, 0x2, 0x10, 0x3ff, 0x3, 0xa, 0x1, [@generic={0xcc, 0xc, "73f7d6f2e262d9f04341ed9b8663ed0c2ed2d4f64a46037dda0e2456cfc5b163a4fd934b0da2e98e75d14ec9f01486dfaf9313e3de00da6f26853f48e013531d8c15bc4b1b49863c89fabd6268e38be1a23e362f20c273528886149441532e0e5a503ac0fdcc4e7550d93c1ae84d9bdc0e2eae1cdced5affbbe3f5c06ded61060d0e69c3c41965017c95ab3616e5db2071cc40a9eae89b50d9c882fb18f7b8ec561eab63926106b59f064851e15521b619badd7f8903efe1e0f641eeae907b3f155dfe3bc3769f9a5d75"}, @generic={0x6b, 0x12, "3a83332b9c8efdc62741058476615f6bccd7db251f052ad1ec2ad21c9d8cdbc734f5472d52b19cf0d2fb7c9a0260b0432bfca1e9e26b27e3cba38104ca377a49f12ca2e34724f5da45116c3bde84d954de91d97ea80d9ac7bcbcdcee115ed3de898b5e58366ab5f793"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0xff, 0x8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x41, 0x72e3}]}}]}}]}}]}}, &(0x7f0000002ec0)={0xa, &(0x7f0000002d80)={0xa, 0x6, 0x310, 0x9, 0x6, 0xab, 0x20, 0xd}, 0x23, &(0x7f0000002dc0)={0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x8, 0x0, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0xc, "1cd14222b18ac562d842d2875fcf5de0"}]}, 0x3, [{0x32, &(0x7f0000002e00)=@string={0x32, 0x3, "1fadac299671b6c1f949236f0de2a77b59e26128b8a09944eb28096b313eba915ee19e53358ed2154c0d22affd788df5"}}, {0x4, &(0x7f0000002e40)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f0000002e80)=@lang_id={0x4, 0x3, 0x408}}]}) 157.972527ms ago: executing program 1 (id=1440): r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000040)) epoll_create1(0x80000) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x208, r2, 0x8, 0x70bd26, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x1800}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xc6}, {0x6, 0x11, 0xb}, {0x8, 0x15, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x80000000}, {0x6, 0x11, 0xff64}, {0x8, 0x15, 0x80000001}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1ff}, {0x6}, {0x8, 0x15, 0xfffffffc}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7ff}, {0x6, 0x11, 0x72fc}, {0x8, 0x15, 0xeae4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x100}, {0x8, 0x15, 0x7fff}}]}, 0x208}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) getsockname$packet(r0, &(0x7f0000000400), &(0x7f0000000440)=0x14) syz_usb_connect(0x3, 0x659, &(0x7f0000000480)={{0x12, 0x1, 0x300, 0x98, 0x2c, 0xdb, 0x20, 0x67b, 0xaaa0, 0x850c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x647, 0x2, 0x80, 0x1, 0x0, 0x40, [{{0x9, 0x4, 0x99, 0x3, 0x7, 0x4a, 0xa3, 0xab, 0xff, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "e2ea3e0e"}, {0x5, 0x24, 0x0, 0xfff9}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x5, 0xb, 0x1}, {0x6, 0x24, 0x1a, 0x8, 0x9}, [@dmm={0x7, 0x24, 0x14, 0x2, 0xffff}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x1e, 0x0, 0x0, 0x5, 0x1}, @acm={0x4, 0x24, 0x2, 0x6}, @obex={0x5, 0x24, 0x15, 0xffff}, @acm={0x4, 0x24, 0x2, 0xf}]}], [{{0x9, 0x5, 0x4, 0x3, 0x20, 0x3, 0x7, 0x0, [@generic={0x91, 0x23, "d1469274e6e0f2441fc039ecd77025e8c0d1d945dc4825938c3b7695db4ce7d65883c6d7d1ffce9c7262fb7603100bb7c42b2ee7c08e8703b432dd6e22a8035a9f5e45bb4adb087ad540134c5d01a8213cc0abbb070f8fc523f61abce90c03a0a15049a4900b1f97c04848ecae99818d839ff6f82cb34bd4c9b6700a7d1acb426e949cca8c659f13b9ac9a7bd0d152"}]}}, {{0x9, 0x5, 0xb, 0xc, 0x40, 0x0, 0x10, 0x4, [@generic={0xdb, 0xe, "6198878c00b24129b112adca64dba96d2810e098a2b298cfb2b6cf051e9015203af3095cbd78762cf2e3a914900dd322de1b76463e765897e2890b98037d1646d00a94864644e7def8254feceeddb119d6b731b5922aaf75bf9dddf526c961fda977783651a93efbc01e5fdbd198caef647568b85fd4f2b9941723f3d818150cb5b13b1884fa83413a5262ae6a7ff8a90687e2aa0142657b1c9aee3eb76f7c06f74295131e47b4415301b2251b41872194bcd1d3e7b6da8865f207e9d8550ffca7e35f76bf8d3ca00d207cdd11b6748438900693015c019f1a"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x5}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x0, 0x6, 0x1, [@generic={0x94, 0x24, "5af68e18da2b1f38b606bdd5962120de1b54f043b60f7cd38f045f10ebcb668933d8786cba1a350ac01d895bccb3f9c20d2c1dffe3cff262d66ae46bea3ce2b5bc60e5ab0b02ad54f3e677a071cb2a30807f4ddc549e89edf838b46952f43bd1033f89ce91fbabaef7438ce1857e610f1535daf92f3e6e19c7a67403deb55ccfee5805e76cd992aff3b4729eb7ccedf0e905"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x97, 0x3}]}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0xff, 0x8, 0x10}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x6, 0x9}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x1, 0x10}}, {{0x9, 0x5, 0x4, 0x3, 0x10, 0x58, 0x5, 0x9, [@generic={0xe9, 0x5, "ba90576fbb164e60d5b179a12314c4310ec6b817a407e88a062182a24f807f37c28b870111754d90066fb6d2663f4b1df96d380cb4ee7da5f8246ad6a6d49ea98f2d74f65022bdaaef846f708550f13d33932b4e7321dbea2636f6168c3432f45050406db5c6b1aa307f9ce1337216be63996db21d7a8decdac18aa5aa9f0ac0bcd4a93ab4da4d69d509531189e5468dda5e20d85e1353f5aa1154bb0bc1e4ebdad272ae320217e0cdf840a17782abe292388f03cc5cfc3e9213c842c002e9a3bcf56995fd2a5ae7be375b14540420d62826ed7c5405c0083e3d7c50451063c24f690450e31e1f"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0xebb}]}}]}}, {{0x9, 0x4, 0x19, 0x7, 0xa, 0x53, 0x3e, 0xad, 0x5, [@uac_as={[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0xec, 0x0, 0x4, "ae9d"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xc7, 0x3, 0x1, 0xa, "", "c036"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x1, 0x2, 0x0, 0x6, "4fd5fab8296aaa"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x9, 0x1, 0x3, 0x0, "1a", "efd3fc"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x2, 0x3, 0x7e, 0xbc, "5acc875557"}]}], [{{0x9, 0x5, 0xd, 0x10, 0x40, 0x2, 0x1, 0xc}}, {{0x9, 0x5, 0x8, 0x8, 0x3ff, 0x5, 0x1, 0xfe}}, {{0x9, 0x5, 0xe, 0x3, 0x20, 0xd, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0xe030}, @generic={0xb4, 0x1, "0454e8fff0418dd92b54a9a00252424135963d4457cadf4580b942e2bf853d76bcd0e9832bfc5295cbc2cb04eb219247e0b421787ae887a016c49393fb475d69e31e44b5f8081841fccd347c73e9beea37306205526842bf4587c895396f58d123db7b3531a81c1b3804ccec22bee20ccc69a27b510985b75929f722338974d4ae851108c454e5560385429882e0d3cb586387bacdee62407d16cc461ceafd14470f2577c6a779a5d80b7f8de10f86253d4a"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x1af, 0x8, 0x6a, 0x1}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x0, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1e, 0x5}]}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0x5, 0x0, 0x9}}, {{0x9, 0x5, 0x5, 0x3, 0x400, 0x3, 0x8, 0x37, [@generic={0x90, 0xd, "bf068e94a815b599474491228724bf4e449722522611d5e9cf2733d3887016651299692efce403fce2bea2e3f4bc41a001fac0bcffc032e86f82d6f5b203c1f4c203d1a47b0111ded517923b093d754511e814022dc8867100bc1fb64b4d087c2f574651d90ebbf3c7fe24d0e3828fade651b941fd453837be1bc6b5749406d5d474c8e083bee5608e289c0eeb76"}, @generic={0xc5, 0xb, "556b148baedd2ce99e59b1cf16f5bf51f24d9b5211079dff6df96a70f661748bed4e22c4059eecabd0d83cd3b011c1aff870a7b508d6a62e9e0d060538dd8775173f194540b38883812f67ae3b564ade7b7b73cdeb39adc8447695076c24cdaac5dff37df68f249e7b0bfe55db4466915e6dc5b287c282bf2cdcd4b0481b6dd36a5f3a4a97d463bdbafc939c610297a6cb18cc8eac714a4540ffe83e95bbc3c7a6cf00cedf352bd57162197ce3485c1585c67b6aca345f952106aaba0beae677cf455b"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x1, 0x5f, 0x5d}}, {{0x9, 0x5, 0x80, 0x2, 0x200, 0xe, 0x3}}, {{0x9, 0x5, 0x7, 0x2, 0x200, 0xd, 0x9, 0xfd}}]}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b00)={0xa, 0x6, 0x300, 0x1, 0x8, 0x0, 0x20, 0xe}, 0x5, &(0x7f0000000b40)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0xc07}}, {0xbf, &(0x7f0000000bc0)=@string={0xbf, 0x3, "ebcb301b14903adda72192ba376a8834d1ecd3b2e86214c7975bb94d68b303f72e41341763f2aea0e1ea6f4027a64bb1853d3b59205d4dd9f45c5489ba124c0913f0586044d456f78006404c3a9b103a12864191fc3bb6dc8a67927192dafb2d3490fd4637b7850c536ae00c384fb3009b11178aec6b8975e58fb26f6db67768975d1e753a0cb4e79dd43a1d1a8efc47710df64582ceb1c41d50ed2ce9f45aff2b3edeb331e8573e4b17dc1baf3d44b04865193e8c4b12ad4f8aeb917b"}}]}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), r1) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d40)={0xd4, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xd9, @remote, 0x7e40}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1ff, @empty, 0x6}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4050}, 0x20000080) syz_genetlink_get_family_id$ipvs(&(0x7f0000000ec0), r1) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000f00)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000f40)={0x0, 0x101}, &(0x7f0000000f80)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000fc0)={0xfffc, 0x3308b1a3de936163, 0x5, 0x3, r5}, &(0x7f0000001000)=0x10) faccessat(0xffffffffffffff9c, &(0x7f0000001040)='./file0\x00', 0x18) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r1) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000083}, 0x40050) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x20, r6, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8cb, 0x79}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004801) 80.604773ms ago: executing program 0 (id=1441): r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f00000010c0)="9c", 0x1}], 0x1, 0x6) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000001480)={0x60, 0x3, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x81, &(0x7f0000001380)=[{0x2, 0x9, 0xc23a}, {0x9, 0x7, 0x100000000}, {0xffffffff, 0x100000001, 0x8000}, {0xda, 0x1, 0x80000001}, {0x2, 0x7, 0x7}, {0x0, 0xf, 0x100000000000}, {0x6, 0xe58e, 0x7fffffffffffffff}, {0x80, 0x7a9d4f37, 0x40}, {0x3, 0x57d5, 0x95df}], 0x9, 0x800100000000, 0x11, 0x0, 0x8, 0x2e}) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000440)={'comedi_parport\x00', [0x4e27, 0x1f, 0x3, 0x7fffffff, 0xe7, 0x8, 0x8, 0xa82, 0x40, 0x100, 0xcf3, 0xb, 0x400, 0x2, 0x3, 0xffffffea, 0x10001, 0x10087, 0x2, 0x0, 0x2, 0x289c, 0xf23, 0x2000007, 0xb, 0xbfd, 0x3c, 0x5, 0x6, 0x0, 0x80000000, 0x3]}) r4 = mq_open(0x0, 0x40, 0x1a2, 0x0) mq_notify(r4, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r5, 0x80044dfb, &(0x7f0000000040)) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r6, @ANYRESDEC=0x0], 0x8c8}}, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000008300)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r7}, 0x38) statx(r1, &(0x7f0000007f00)='./file0\x00', 0x0, 0x2, &(0x7f0000007f40)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000008040)) r8 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) r12 = shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_SET(r12, 0x1, &(0x7f0000000180)={{0x3, r10, r11, r10, r11, 0x40, 0x6}, 0x9, 0x9, 0xd, 0x9, r9, r9, 0x4}) 0s ago: executing program 2 (id=1442): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f0000005700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x2e, 0x1}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) write$proc_mixer(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='VOLUME \''], 0x2a) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, 0x0, 0x2, {0x2, 0xff, 0x3}, 0x2}, 0x18) kernel console output (not intermixed with test programs): x77/0x7f [ 307.579289][ T8752] RIP: 0033:0x7f74ce87e1ff [ 307.579335][ T8752] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 307.579348][ T8752] RSP: 002b:00007f74ccade000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 307.579364][ T8752] RAX: ffffffffffffffda RBX: 00007f74cead5fa0 RCX: 00007f74ce87e1ff [ 307.579374][ T8752] RDX: 000000000000fef3 RSI: 0000200000000200 RDI: 00000000000000c8 [ 307.579383][ T8752] RBP: 00007f74ccade090 R08: 0000000000000000 R09: 0000000000000000 [ 307.579391][ T8752] R10: 000000000000fef3 R11: 0000000000000293 R12: 0000000000000001 [ 307.579400][ T8752] R13: 00007f74cead6038 R14: 00007f74cead5fa0 R15: 00007ffc9c3414c8 [ 307.579422][ T8752] [ 308.102384][ T5911] ftdi_sio 2-1:8.241: FTDI USB Serial Device converter detected [ 308.117998][ T5911] ftdi_sio ttyUSB0: unknown device type: 0xca31 [ 308.134072][ T5911] usb 2-1: USB disconnect, device number 25 [ 308.147618][ T5911] ftdi_sio 2-1:8.241: device disconnected [ 308.149461][ T8759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.931'. [ 308.245281][ T8770] netlink: 96 bytes leftover after parsing attributes in process `syz.4.933'. [ 308.245310][ T8770] netlink: 48 bytes leftover after parsing attributes in process `syz.4.933'. [ 309.419724][ T5911] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 309.569380][ T5911] usb 4-1: Using ep0 maxpacket: 32 [ 309.601032][ T5911] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 309.601060][ T5911] usb 4-1: config 0 has no interface number 0 [ 309.601109][ T5911] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 309.601134][ T5911] usb 4-1: config 0 interface 126 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0 [ 309.601155][ T5911] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 0 [ 309.601177][ T5911] usb 4-1: config 0 interface 126 has no altsetting 0 [ 309.683689][ T5911] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 309.683718][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.683737][ T5911] usb 4-1: Product: syz [ 309.683750][ T5911] usb 4-1: Manufacturer: syz [ 309.683764][ T5911] usb 4-1: SerialNumber: syz [ 309.725408][ T5911] usb 4-1: config 0 descriptor?? [ 309.726724][ T8790] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 310.317726][ T8799] FAULT_INJECTION: forcing a failure. [ 310.317726][ T8799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.317760][ T8799] CPU: 0 UID: 0 PID: 8799 Comm: syz.1.943 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 310.317782][ T8799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 310.317793][ T8799] Call Trace: [ 310.317801][ T8799] [ 310.317809][ T8799] dump_stack_lvl+0xe8/0x150 [ 310.317838][ T8799] should_fail_ex+0x46c/0x600 [ 310.317866][ T8799] _copy_from_user+0x2d/0xb0 [ 310.317886][ T8799] ___sys_sendmsg+0x158/0x2a0 [ 310.317911][ T8799] ? __pfx____sys_sendmsg+0x10/0x10 [ 310.317964][ T8799] ? __fget_files+0x2a/0x420 [ 310.317984][ T8799] ? __fget_files+0x3a6/0x420 [ 310.318009][ T8799] __x64_sys_sendmsg+0x1a1/0x260 [ 310.318033][ T8799] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 310.318061][ T8799] ? __pfx_ksys_write+0x10/0x10 [ 310.318095][ T8799] do_syscall_64+0xec/0xf80 [ 310.318113][ T8799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.318131][ T8799] ? trace_irq_disable+0x37/0x100 [ 310.318149][ T8799] ? clear_bhb_loop+0x60/0xb0 [ 310.318170][ T8799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.318188][ T8799] RIP: 0033:0x7fe92467f749 [ 310.318204][ T8799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.318220][ T8799] RSP: 002b:00007fe9228e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.318240][ T8799] RAX: ffffffffffffffda RBX: 00007fe9248d5fa0 RCX: 00007fe92467f749 [ 310.318263][ T8799] RDX: 0000000020000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 310.318275][ T8799] RBP: 00007fe9228e6090 R08: 0000000000000000 R09: 0000000000000000 [ 310.318287][ T8799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.318298][ T8799] R13: 00007fe9248d6038 R14: 00007fe9248d5fa0 R15: 00007ffc930b9cd8 [ 310.318329][ T8799] [ 310.483199][ T8801] comedi comedi4: bad chanlist[0]=0x04040007 chan=7 range length=2 [ 310.729288][ T924] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 310.799232][ T6299] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 310.879200][ T924] usb 2-1: Using ep0 maxpacket: 8 [ 310.884694][ T924] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 310.884734][ T924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.884753][ T924] usb 2-1: Product: syz [ 310.884766][ T924] usb 2-1: Manufacturer: syz [ 310.884780][ T924] usb 2-1: SerialNumber: syz [ 310.931537][ T924] usb 2-1: config 0 descriptor?? [ 310.965966][ T6299] usb 3-1: not running at top speed; connect to a high speed hub [ 310.978124][ T6299] usb 3-1: config 8 has an invalid interface number: 241 but max is 0 [ 310.978149][ T6299] usb 3-1: config 8 has no interface number 0 [ 310.978278][ T6299] usb 3-1: config 8 interface 241 has no altsetting 0 [ 311.003917][ T6299] usb 3-1: New USB device found, idVendor=0c52, idProduct=2843, bcdDevice=ca.31 [ 311.003945][ T6299] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.003968][ T6299] usb 3-1: Product: 䟺㪩漈ఈ⺐익놼禡⋥쒓–㏱㫠翿攃䨈戼䏇栾䛸אּ滲铹贮㽼만爢뻥糞듵梫ꢝ읏赁娇鬩嬆鮷펆㞙鋆壡ᡘ㙺៽煾蔷얞㔍蹓ౙ흂帗曚⓿릧カ肠ꇎ몥荖ì扉㱉䴱妾ᵻ곫吶羵ݮ孹倊㨬桋稟囻 [ 311.004040][ T6299] usb 3-1: Manufacturer: 릕⏪㼬棧谤㥁渚ᐡ皽鎸꓿폶ၖ㓢ร戎쀥ꙅ꽌좖义熋芈氞铳ᬽ稵ﵞ蓖⢗烶☑밋챉뉇쁋軖鱥獜軁믛℮諽ᴿ噓≄幎ᐸ싺晐匚湮髏릭㙢䵐∾돡ዱ䉉⚺閶談啕䣖㋛럑¾拝ར핍湣ꎮᒵ⃵柛뺖ᚻ〟돜음쒔⏳웯伙팪첹⁍竵暎㾡탲Ź朦퍂옩⍍ក [ 311.004071][ T6299] usb 3-1: SerialNumber: ఉ [ 311.154546][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 311.154565][ T37] audit: type=1326 audit(1767704803.857:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8802 comm="syz.1.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92467f749 code=0x7ffc0000 [ 311.157638][ T8803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.158079][ T8803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.160338][ T37] audit: type=1326 audit(1767704803.857:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8802 comm="syz.1.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe92467df90 code=0x7ffc0000 [ 311.160388][ T37] audit: type=1326 audit(1767704803.857:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8802 comm="syz.1.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe92467f34b code=0x7ffc0000 [ 311.160428][ T37] audit: type=1326 audit(1767704803.857:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8802 comm="syz.1.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe92467f34b code=0x7ffc0000 [ 311.160469][ T37] audit: type=1326 audit(1767704803.857:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8802 comm="syz.1.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92467f749 code=0x7ffc0000 [ 311.160509][ T37] audit: type=1326 audit(1767704803.857:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8802 comm="syz.1.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92467f749 code=0x7ffc0000 [ 311.202863][ T37] audit: type=1326 audit(1767704803.907:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8802 comm="syz.1.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe92467f749 code=0x7ffc0000 [ 311.203853][ T37] audit: type=1326 audit(1767704803.907:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8802 comm="syz.1.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92467f749 code=0x7ffc0000 [ 311.208195][ T37] audit: type=1326 audit(1767704803.907:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8802 comm="syz.1.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe92467f749 code=0x7ffc0000 [ 311.208246][ T37] audit: type=1326 audit(1767704803.907:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8802 comm="syz.1.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92467f749 code=0x7ffc0000 [ 313.004899][ T5812] Bluetooth: hci4: command 0x0406 tx timeout [ 314.186707][ T5911] ir_usb 4-1:0.126: IR Dongle converter detected [ 314.200604][ T5911] usb 4-1: IRDA class descriptor not found, device not bound [ 314.220964][ T6299] ftdi_sio 3-1:8.241: FTDI USB Serial Device converter detected [ 314.223288][ T6299] ftdi_sio ttyUSB0: unknown device type: 0xca31 [ 314.259612][ T5911] usb 4-1: USB disconnect, device number 24 [ 314.283823][ T6299] usb 3-1: USB disconnect, device number 36 [ 314.309655][ T6299] ftdi_sio 3-1:8.241: device disconnected [ 314.689203][ T6299] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 314.910507][ T924] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 315.137772][ T924] usb 5-1: too many configurations: 17, using maximum allowed: 8 [ 315.250272][ T6299] usb 3-1: device descriptor read/64, error -71 [ 315.253149][ T10] usb 2-1: USB disconnect, device number 26 [ 316.449202][ T5992] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 316.521106][ T924] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 316.521136][ T924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.521156][ T924] usb 5-1: Product: syz [ 316.521170][ T924] usb 5-1: Manufacturer: syz [ 316.521183][ T924] usb 5-1: SerialNumber: syz [ 316.549393][ T6299] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 316.637644][ T5992] usb 4-1: config 0 has no interfaces? [ 316.717983][ T5992] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 316.718030][ T5992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.718085][ T5992] usb 4-1: Product: syz [ 316.718099][ T5992] usb 4-1: Manufacturer: syz [ 316.718113][ T5992] usb 4-1: SerialNumber: syz [ 316.792885][ T924] usb 5-1: config 0 descriptor?? [ 316.901107][ T5992] usb 4-1: config 0 descriptor?? [ 316.952718][ T924] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 317.148794][ T6299] usb 3-1: device descriptor read/64, error -71 [ 317.250788][ T6299] usb usb3-port1: attempt power cycle [ 317.358620][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.374545][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.756858][ T924] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 317.767114][ T924] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 317.775425][ T924] usb 5-1: media controller created [ 319.187279][ T8845] FAULT_INJECTION: forcing a failure. [ 319.187279][ T8845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.187488][ T8845] CPU: 0 UID: 0 PID: 8845 Comm: syz.1.956 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 319.187512][ T8845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 319.187524][ T8845] Call Trace: [ 319.187532][ T8845] [ 319.187541][ T8845] dump_stack_lvl+0xe8/0x150 [ 319.187580][ T8845] should_fail_ex+0x46c/0x600 [ 319.187611][ T8845] _copy_to_user+0x31/0xb0 [ 319.187633][ T8845] simple_read_from_buffer+0xe1/0x170 [ 319.187658][ T8845] proc_fail_nth_read+0x1b6/0x220 [ 319.187687][ T8845] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 319.187715][ T8845] ? rw_verify_area+0x2ac/0x4e0 [ 319.187739][ T8845] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 319.187766][ T8845] vfs_read+0x206/0xa30 [ 319.187798][ T8845] ? __pfx_vfs_read+0x10/0x10 [ 319.187825][ T8845] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 319.187845][ T8845] ? lockdep_hardirqs_on+0x7b/0x110 [ 319.187863][ T8845] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 319.187881][ T8845] ? mutex_lock_nested+0x154/0x1d0 [ 319.187903][ T8845] ? fdget_pos+0x253/0x320 [ 319.187932][ T8845] ksys_read+0x14b/0x260 [ 319.187955][ T8845] ? __fget_files+0x3a6/0x420 [ 319.187975][ T8845] ? __pfx_ksys_read+0x10/0x10 [ 319.188011][ T8845] do_syscall_64+0xec/0xf80 [ 319.188028][ T8845] ? rcu_is_watching+0x15/0xb0 [ 319.188045][ T8845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.188063][ T8845] ? clear_bhb_loop+0x60/0xb0 [ 319.188086][ T8845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.188104][ T8845] RIP: 0033:0x7fe92467e15c [ 319.188122][ T8845] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 319.188138][ T8845] RSP: 002b:00007fe9228c5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 319.188159][ T8845] RAX: ffffffffffffffda RBX: 00007fe9248d6090 RCX: 00007fe92467e15c [ 319.188173][ T8845] RDX: 000000000000000f RSI: 00007fe9228c50a0 RDI: 0000000000000006 [ 319.188186][ T8845] RBP: 00007fe9228c5090 R08: 0000000000000000 R09: 0000000000000000 [ 319.188198][ T8845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.188209][ T8845] R13: 00007fe9248d6128 R14: 00007fe9248d6090 R15: 00007ffc930b9cd8 [ 319.188241][ T8845] [ 319.395531][ T924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 320.424358][ T8850] comedi comedi4: bad chanlist[0]=0x04040007 chan=7 range length=2 [ 320.452383][ T5866] usb 4-1: USB disconnect, device number 25 [ 320.626194][ T924] DVB: Unable to find symbol mt352_attach() [ 320.728262][ T924] DVB: Unable to find symbol nxt6000_attach() [ 320.728272][ T924] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 320.747188][ T924] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 320.792500][ T924] dvb-usb: schedule remote query interval to 1000 msecs. [ 320.792523][ T924] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 320.792903][ T924] dvb-usb: bulk message failed: -22 (7/0) [ 320.792921][ T924] dvb-usb: bulk message failed: -22 (7/0) [ 320.836128][ T924] usb 5-1: USB disconnect, device number 24 [ 321.036864][ T924] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 321.369190][ T924] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 321.523092][ T924] usb 5-1: not running at top speed; connect to a high speed hub [ 321.524322][ T924] usb 5-1: config 8 has an invalid interface number: 241 but max is 0 [ 321.524347][ T924] usb 5-1: config 8 has no interface number 0 [ 321.524406][ T924] usb 5-1: config 8 interface 241 has no altsetting 0 [ 321.539314][ T924] usb 5-1: New USB device found, idVendor=0c52, idProduct=2843, bcdDevice=ca.31 [ 321.539344][ T924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.539363][ T924] usb 5-1: Product: 䟺㪩漈ఈ⺐익놼禡⋥쒓–㏱㫠翿攃䨈戼䏇栾䛸אּ滲铹贮㽼만爢뻥糞듵梫ꢝ읏赁娇鬩嬆鮷펆㞙鋆壡ᡘ㙺៽煾蔷얞㔍蹓ౙ흂帗曚⓿릧カ肠ꇎ몥荖ì扉㱉䴱妾ᵻ곫吶羵ݮ孹倊㨬桋稟囻 [ 321.539399][ T924] usb 5-1: Manufacturer: 릕⏪㼬棧谤㥁渚ᐡ皽鎸꓿폶ၖ㓢ร戎쀥ꙅ꽌좖义熋芈氞铳ᬽ稵ﵞ蓖⢗烶☑밋챉뉇쁋軖鱥獜軁믛℮諽ᴿ噓≄幎ᐸ싺晐匚湮髏릭㙢䵐∾돡ዱ䉉⚺閶談啕䣖㋛럑¾拝ར핍湣ꎮᒵ⃵柛뺖ᚻ〟돜음쒔⏳웯伙팪첹⁍竵暎㾡탲Ź朦퍂옩⍍ក [ 321.539431][ T924] usb 5-1: SerialNumber: ఉ [ 321.709267][ T43] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 321.716498][ T8885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.970'. [ 321.808497][ T5866] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 321.870574][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.870607][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.870643][ T43] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 321.870672][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.874938][ T43] usb 4-1: config 0 descriptor?? [ 321.950414][ T5866] usb 3-1: device descriptor read/64, error -71 [ 322.049872][ T8892] FAULT_INJECTION: forcing a failure. [ 322.049872][ T8892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.049906][ T8892] CPU: 1 UID: 0 PID: 8892 Comm: syz.1.973 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 322.049932][ T8892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 322.049942][ T8892] Call Trace: [ 322.050099][ T8892] [ 322.050119][ T8892] dump_stack_lvl+0xe8/0x150 [ 322.050154][ T8892] should_fail_ex+0x46c/0x600 [ 322.050186][ T8892] _copy_to_user+0x31/0xb0 [ 322.050350][ T8892] simple_read_from_buffer+0xe1/0x170 [ 322.050391][ T8892] proc_fail_nth_read+0x1b6/0x220 [ 322.050422][ T8892] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 322.050446][ T8892] ? rw_verify_area+0x2ac/0x4e0 [ 322.050459][ T8892] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 322.050479][ T8892] vfs_read+0x206/0xa30 [ 322.050512][ T8892] ? __pfx_vfs_read+0x10/0x10 [ 322.050539][ T8892] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 322.050559][ T8892] ? lockdep_hardirqs_on+0x7b/0x110 [ 322.050577][ T8892] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 322.050595][ T8892] ? mutex_lock_nested+0x154/0x1d0 [ 322.050610][ T8892] ? fdget_pos+0x253/0x320 [ 322.050626][ T8892] ksys_read+0x14b/0x260 [ 322.050641][ T8892] ? __pfx_ksys_read+0x10/0x10 [ 322.050675][ T8892] do_syscall_64+0xec/0xf80 [ 322.050693][ T8892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.050712][ T8892] ? clear_bhb_loop+0x60/0xb0 [ 322.050734][ T8892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.050753][ T8892] RIP: 0033:0x7fe92467e15c [ 322.050768][ T8892] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 322.050777][ T8892] RSP: 002b:00007fe9228c5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 322.050789][ T8892] RAX: ffffffffffffffda RBX: 00007fe9248d6090 RCX: 00007fe92467e15c [ 322.050797][ T8892] RDX: 000000000000000f RSI: 00007fe9228c50a0 RDI: 0000000000000006 [ 322.050804][ T8892] RBP: 00007fe9228c5090 R08: 0000000000000000 R09: 0000000000000000 [ 322.050810][ T8892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.050821][ T8892] R13: 00007fe9248d6128 R14: 00007fe9248d6090 R15: 00007ffc930b9cd8 [ 322.050853][ T8892] [ 322.189816][ T5866] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 322.319215][ T5866] usb 3-1: device descriptor read/64, error -71 [ 322.434050][ T5812] Bluetooth: hci4: command 0x0406 tx timeout [ 322.434412][ T5866] usb usb3-port1: attempt power cycle [ 322.472004][ T43] usbhid 4-1:0.0: can't add hid device: -71 [ 322.473409][ T43] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 322.480002][ T43] usb 4-1: USB disconnect, device number 26 [ 322.606685][ T8899] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 322.779222][ T5866] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 322.800521][ T5866] usb 3-1: device descriptor read/8, error -71 [ 323.039241][ T5866] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 323.060884][ T5866] usb 3-1: device descriptor read/8, error -71 [ 323.169750][ T5866] usb usb3-port1: unable to enumerate USB device [ 323.380769][ T924] ftdi_sio 5-1:8.241: FTDI USB Serial Device converter detected [ 323.393094][ T924] ftdi_sio ttyUSB0: unknown device type: 0xca31 [ 323.425019][ T924] usb 5-1: USB disconnect, device number 25 [ 323.449206][ T924] ftdi_sio 5-1:8.241: device disconnected [ 323.504940][ T8911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.980'. [ 323.789180][ T5866] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 323.830155][ T924] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 323.939271][ T5866] usb 4-1: Using ep0 maxpacket: 16 [ 323.941290][ T5866] usb 4-1: config 0 has no interfaces? [ 323.946550][ T5866] usb 4-1: New USB device found, idVendor=954f, idProduct=a199, bcdDevice= 0.09 [ 323.946577][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 323.946590][ T5866] usb 4-1: Product: syz [ 323.946597][ T5866] usb 4-1: SerialNumber: syz [ 323.951563][ T5866] usb 4-1: config 0 descriptor?? [ 324.017119][ T924] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 324.017142][ T924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.017160][ T924] usb 5-1: Product: syz [ 324.017173][ T924] usb 5-1: Manufacturer: syz [ 324.017186][ T924] usb 5-1: SerialNumber: syz [ 324.051731][ T924] usb 5-1: config 0 descriptor?? [ 324.073727][ T924] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 324.126217][ T8915] FAULT_INJECTION: forcing a failure. [ 324.126217][ T8915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.126251][ T8915] CPU: 1 UID: 0 PID: 8915 Comm: syz.1.982 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 324.126283][ T8915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 324.126295][ T8915] Call Trace: [ 324.126303][ T8915] [ 324.126311][ T8915] dump_stack_lvl+0xe8/0x150 [ 324.126341][ T8915] should_fail_ex+0x46c/0x600 [ 324.126373][ T8915] _copy_to_user+0x31/0xb0 [ 324.126396][ T8915] __se_sys_capget+0x489/0x4e0 [ 324.126421][ T8915] ? __pfx___se_sys_capget+0x10/0x10 [ 324.126442][ T8915] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 324.126461][ T8915] ? lockdep_hardirqs_on+0x7b/0x110 [ 324.126481][ T8915] ? rcu_read_unlock_trace_special+0x23d/0x340 [ 324.126507][ T8915] ? rcu_is_watching+0x15/0xb0 [ 324.126525][ T8915] ? trace_sys_enter+0x25/0xf0 [ 324.126556][ T8915] do_syscall_64+0xec/0xf80 [ 324.126574][ T8915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.126592][ T8915] ? trace_irq_disable+0x37/0x100 [ 324.126610][ T8915] ? clear_bhb_loop+0x60/0xb0 [ 324.126633][ T8915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.126652][ T8915] RIP: 0033:0x7fe92467f749 [ 324.126668][ T8915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.126684][ T8915] RSP: 002b:00007fe9228e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000007d [ 324.126703][ T8915] RAX: ffffffffffffffda RBX: 00007fe9248d5fa0 RCX: 00007fe92467f749 [ 324.126717][ T8915] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000080 [ 324.126730][ T8915] RBP: 00007fe9228e6090 R08: 0000000000000000 R09: 0000000000000000 [ 324.126741][ T8915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.126753][ T8915] R13: 00007fe9248d6038 R14: 00007fe9248d5fa0 R15: 00007ffc930b9cd8 [ 324.126783][ T8915] [ 324.237720][ T8913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.981'. [ 324.273372][ T5866] usb 4-1: USB disconnect, device number 27 [ 324.464203][ T8911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.465000][ T8911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.476689][ T8911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.980'. [ 324.476909][ T8911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.980'. [ 324.510682][ T924] gspca_sunplus: reg_w_riv err -71 [ 324.510796][ T924] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 324.519038][ T924] usb 5-1: USB disconnect, device number 26 [ 325.105681][ T8934] comedi comedi4: bad chanlist[0]=0x04040007 chan=7 range length=2 [ 326.525883][ T8954] netlink: 36 bytes leftover after parsing attributes in process `syz.0.993'. [ 326.716673][ T8963] FAULT_INJECTION: forcing a failure. [ 326.716673][ T8963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.716708][ T8963] CPU: 1 UID: 0 PID: 8963 Comm: syz.3.996 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 326.716729][ T8963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 326.716741][ T8963] Call Trace: [ 326.716748][ T8963] [ 326.716757][ T8963] dump_stack_lvl+0xe8/0x150 [ 326.716786][ T8963] should_fail_ex+0x46c/0x600 [ 326.716816][ T8963] _copy_from_user+0x2d/0xb0 [ 326.716837][ T8963] ___sys_sendmsg+0x158/0x2a0 [ 326.716861][ T8963] ? __pfx____sys_sendmsg+0x10/0x10 [ 326.716916][ T8963] ? __fget_files+0x2a/0x420 [ 326.716935][ T8963] ? __fget_files+0x3a6/0x420 [ 326.716963][ T8963] __x64_sys_sendmsg+0x1a1/0x260 [ 326.716997][ T8963] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 326.717028][ T8963] ? __pfx_ksys_write+0x10/0x10 [ 326.717065][ T8963] do_syscall_64+0xec/0xf80 [ 326.717083][ T8963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.717100][ T8963] ? trace_irq_disable+0x37/0x100 [ 326.717118][ T8963] ? clear_bhb_loop+0x60/0xb0 [ 326.717139][ T8963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.717156][ T8963] RIP: 0033:0x7f45c1f5f749 [ 326.717173][ T8963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.717190][ T8963] RSP: 002b:00007f45c01c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.717211][ T8963] RAX: ffffffffffffffda RBX: 00007f45c21b5fa0 RCX: 00007f45c1f5f749 [ 326.717225][ T8963] RDX: 0000000000000080 RSI: 0000200000000380 RDI: 0000000000000004 [ 326.717237][ T8963] RBP: 00007f45c01c6090 R08: 0000000000000000 R09: 0000000000000000 [ 326.717249][ T8963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.717261][ T8963] R13: 00007f45c21b6038 R14: 00007f45c21b5fa0 R15: 00007ffc32064368 [ 326.717293][ T8963] [ 327.149504][ T5814] Bluetooth: hci4: command 0x0406 tx timeout [ 327.167052][ T8967] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 328.400244][ T8983] FAULT_INJECTION: forcing a failure. [ 328.400244][ T8983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.400279][ T8983] CPU: 0 UID: 0 PID: 8983 Comm: syz.3.1003 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 328.400302][ T8983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 328.400313][ T8983] Call Trace: [ 328.400320][ T8983] [ 328.400329][ T8983] dump_stack_lvl+0xe8/0x150 [ 328.400358][ T8983] should_fail_ex+0x46c/0x600 [ 328.400388][ T8983] _copy_from_user+0x2d/0xb0 [ 328.400408][ T8983] ___sys_sendmsg+0x158/0x2a0 [ 328.400435][ T8983] ? __pfx____sys_sendmsg+0x10/0x10 [ 328.400492][ T8983] ? __fget_files+0x2a/0x420 [ 328.400512][ T8983] ? __fget_files+0x3a6/0x420 [ 328.400541][ T8983] __x64_sys_sendmsg+0x1a1/0x260 [ 328.400566][ T8983] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 328.400598][ T8983] ? __pfx_ksys_write+0x10/0x10 [ 328.400634][ T8983] do_syscall_64+0xec/0xf80 [ 328.400653][ T8983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.400671][ T8983] ? trace_irq_disable+0x37/0x100 [ 328.400691][ T8983] ? clear_bhb_loop+0x60/0xb0 [ 328.400713][ T8983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.400730][ T8983] RIP: 0033:0x7f45c1f5f749 [ 328.400747][ T8983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.400765][ T8983] RSP: 002b:00007f45c01a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.400786][ T8983] RAX: ffffffffffffffda RBX: 00007f45c21b6090 RCX: 00007f45c1f5f749 [ 328.400800][ T8983] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000004 [ 328.400813][ T8983] RBP: 00007f45c01a5090 R08: 0000000000000000 R09: 0000000000000000 [ 328.400825][ T8983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.400836][ T8983] R13: 00007f45c21b6128 R14: 00007f45c21b6090 R15: 00007ffc32064368 [ 328.400867][ T8983] [ 331.234510][ T9017] FAULT_INJECTION: forcing a failure. [ 331.234510][ T9017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.234543][ T9017] CPU: 1 UID: 0 PID: 9017 Comm: syz.3.1015 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 331.234565][ T9017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 331.234576][ T9017] Call Trace: [ 331.234584][ T9017] [ 331.234591][ T9017] dump_stack_lvl+0xe8/0x150 [ 331.234621][ T9017] should_fail_ex+0x46c/0x600 [ 331.234662][ T9017] _copy_to_user+0x31/0xb0 [ 331.234683][ T9017] simple_read_from_buffer+0xe1/0x170 [ 331.234707][ T9017] proc_fail_nth_read+0x1b6/0x220 [ 331.234736][ T9017] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 331.234764][ T9017] ? rw_verify_area+0x2ac/0x4e0 [ 331.234787][ T9017] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 331.234813][ T9017] vfs_read+0x206/0xa30 [ 331.234834][ T9017] ? __pfx___fcntl_getlease+0x10/0x10 [ 331.234865][ T9017] ? __pfx_vfs_read+0x10/0x10 [ 331.234887][ T9017] ? do_fcntl+0x48d/0x1820 [ 331.234909][ T9017] ? smack_file_fcntl+0x13a/0x2f0 [ 331.234932][ T9017] ? __pfx_do_fcntl+0x10/0x10 [ 331.234953][ T9017] ? __pfx_smack_file_fcntl+0x10/0x10 [ 331.234982][ T9017] ksys_read+0x14b/0x260 [ 331.235008][ T9017] ? __pfx_ksys_read+0x10/0x10 [ 331.235042][ T9017] do_syscall_64+0xec/0xf80 [ 331.235062][ T9017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.235080][ T9017] ? trace_irq_disable+0x37/0x100 [ 331.235098][ T9017] ? clear_bhb_loop+0x60/0xb0 [ 331.235121][ T9017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.235139][ T9017] RIP: 0033:0x7f45c1f5e15c [ 331.235157][ T9017] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 331.235173][ T9017] RSP: 002b:00007f45c01c6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 331.235194][ T9017] RAX: ffffffffffffffda RBX: 00007f45c21b5fa0 RCX: 00007f45c1f5e15c [ 331.235208][ T9017] RDX: 000000000000000f RSI: 00007f45c01c60a0 RDI: 0000000000000004 [ 331.235220][ T9017] RBP: 00007f45c01c6090 R08: 0000000000000000 R09: 0000000000000000 [ 331.235232][ T9017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.235243][ T9017] R13: 00007f45c21b6038 R14: 00007f45c21b5fa0 R15: 00007ffc32064368 [ 331.235274][ T9017] [ 331.383344][ T9019] comedi comedi4: bad chanlist[0]=0x04040007 chan=7 range length=2 [ 331.784302][ T9026] lo speed is unknown, defaulting to 1000 [ 331.785326][ T9026] lo speed is unknown, defaulting to 1000 [ 331.822712][ T9026] lo speed is unknown, defaulting to 1000 [ 331.854715][ T9026] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 331.883818][ T9026] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 331.975076][ T37] kauditd_printk_skb: 30 callbacks suppressed [ 331.975098][ T37] audit: type=1804 audit(1767704824.677:151): pid=9031 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.1018" name="/newroot/237/file0" dev="tmpfs" ino=1254 res=1 errno=0 [ 332.243358][ T9026] lo speed is unknown, defaulting to 1000 [ 332.247551][ T9026] lo speed is unknown, defaulting to 1000 [ 332.295927][ T9026] lo speed is unknown, defaulting to 1000 [ 332.298294][ T9026] lo speed is unknown, defaulting to 1000 [ 332.353691][ T9026] lo speed is unknown, defaulting to 1000 [ 332.984802][ T9054] netlink: 'syz.2.1025': attribute type 21 has an invalid length. [ 332.984915][ T9054] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1025'. [ 332.984953][ T9054] netlink: 'syz.2.1025': attribute type 1 has an invalid length. [ 333.639275][ T5814] Bluetooth: hci4: command 0x0406 tx timeout [ 334.119311][ T43] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 334.237936][ T9064] netlink: 'syz.4.1012': attribute type 1 has an invalid length. [ 334.237959][ T9064] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1012'. [ 334.819236][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 334.821451][ T43] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 334.821482][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 334.821504][ T43] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 334.821528][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 30768, setting to 1024 [ 334.821553][ T43] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 334.824603][ T43] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 334.824631][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.824651][ T43] usb 4-1: Product: syz [ 334.824665][ T43] usb 4-1: Manufacturer: syz [ 334.824686][ T43] usb 4-1: SerialNumber: syz [ 334.935139][ T43] usb 4-1: config 0 descriptor?? [ 334.969767][ T9058] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 334.982468][ C1] port100 4-1:0.0: NFC: Urb failure (status -71) [ 335.029454][ T43] port100 4-1:0.0: NFC: Could not get supported command types [ 335.256610][ T924] usb 4-1: USB disconnect, device number 28 [ 335.454192][ T9076] FAULT_INJECTION: forcing a failure. [ 335.454192][ T9076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.454215][ T9076] CPU: 0 UID: 0 PID: 9076 Comm: syz.2.1034 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 335.454228][ T9076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 335.454235][ T9076] Call Trace: [ 335.454239][ T9076] [ 335.454244][ T9076] dump_stack_lvl+0xe8/0x150 [ 335.454263][ T9076] should_fail_ex+0x46c/0x600 [ 335.454285][ T9076] _copy_from_user+0x2d/0xb0 [ 335.454296][ T9076] ___sys_recvmsg+0x12e/0x510 [ 335.454314][ T9076] ? __pfx____sys_recvmsg+0x10/0x10 [ 335.454330][ T9076] ? __fget_files+0x2a/0x420 [ 335.454350][ T9076] ? __fget_files+0x3a6/0x420 [ 335.454365][ T9076] do_recvmmsg+0x30d/0x770 [ 335.454382][ T9076] ? __pfx_do_recvmmsg+0x10/0x10 [ 335.454402][ T9076] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 335.454425][ T9076] __x64_sys_recvmmsg+0x190/0x240 [ 335.454440][ T9076] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 335.454459][ T9076] do_syscall_64+0xec/0xf80 [ 335.454469][ T9076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.454479][ T9076] ? trace_irq_disable+0x37/0x100 [ 335.454490][ T9076] ? clear_bhb_loop+0x60/0xb0 [ 335.454502][ T9076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.454511][ T9076] RIP: 0033:0x7f35d727f749 [ 335.454521][ T9076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.454530][ T9076] RSP: 002b:00007f35d54e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 335.454542][ T9076] RAX: ffffffffffffffda RBX: 00007f35d74d5fa0 RCX: 00007f35d727f749 [ 335.454549][ T9076] RDX: 040000000000026c RSI: 00002000000005c0 RDI: 0000000000000003 [ 335.454556][ T9076] RBP: 00007f35d54e6090 R08: 0000000000000000 R09: 0000000000000000 [ 335.454562][ T9076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.454568][ T9076] R13: 00007f35d74d6038 R14: 00007f35d74d5fa0 R15: 00007fff6b5136e8 [ 335.454584][ T9076] [ 337.108490][ T9096] comedi comedi4: bad chanlist[0]=0x04040007 chan=7 range length=2 [ 338.229318][ T5992] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 338.379299][ T5992] usb 2-1: Using ep0 maxpacket: 8 [ 338.421111][ T9108] FAULT_INJECTION: forcing a failure. [ 338.421111][ T9108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.421225][ T9108] CPU: 1 UID: 0 PID: 9108 Comm: syz.3.1045 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 338.421239][ T9108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 338.421246][ T9108] Call Trace: [ 338.421251][ T9108] [ 338.421256][ T9108] dump_stack_lvl+0xe8/0x150 [ 338.421275][ T9108] should_fail_ex+0x46c/0x600 [ 338.421292][ T9108] _copy_from_user+0x2d/0xb0 [ 338.421303][ T9108] __se_sys_io_uring_setup+0x176/0x240 [ 338.421320][ T9108] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 338.421335][ T9108] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 338.421355][ T9108] ? __pfx_ksys_write+0x10/0x10 [ 338.421375][ T9108] do_syscall_64+0xec/0xf80 [ 338.421385][ T9108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.421395][ T9108] ? trace_irq_disable+0x37/0x100 [ 338.421406][ T9108] ? clear_bhb_loop+0x60/0xb0 [ 338.421424][ T9108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.421434][ T9108] RIP: 0033:0x7f45c1f5f749 [ 338.421443][ T9108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.421452][ T9108] RSP: 002b:00007f45c01c5fc8 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 338.421464][ T9108] RAX: ffffffffffffffda RBX: 00007f45c21b5fa0 RCX: 00007f45c1f5f749 [ 338.421472][ T9108] RDX: 0000200000000280 RSI: 0000200000000180 RDI: 000000000000088f [ 338.421479][ T9108] RBP: 0000200000000180 R08: 0000000000000000 R09: 0000200000000280 [ 338.421485][ T9108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.421492][ T9108] R13: 0000200000000000 R14: 000000000000088f R15: 0000200000000280 [ 338.421507][ T9108] [ 338.421943][ T43] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 338.750632][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 338.831399][ T43] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 338.831438][ T43] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 338.831562][ T43] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 338.831792][ T43] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 338.832011][ T43] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 338.832571][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.142644][ T5992] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 339.142672][ T5992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.142693][ T5992] usb 2-1: Product: syz [ 339.142706][ T5992] usb 2-1: Manufacturer: syz [ 339.142720][ T5992] usb 2-1: SerialNumber: syz [ 339.159299][ T5992] usb 2-1: config 0 descriptor?? [ 339.164898][ T5992] gspca_main: se401-2.14.0 probing 047d:5003 [ 339.319187][ T5814] Bluetooth: hci4: command 0x0406 tx timeout [ 339.434145][ T43] usb 3-1: GET_CAPABILITIES returned 0 [ 339.434194][ T43] usbtmc 3-1:16.0: can't read capabilities [ 339.569332][ T5992] gspca_se401: ExtraFeatures: 79 [ 339.569350][ T5992] gspca_se401: Frame size: 0x0 1/16th janggu [ 339.842816][ T9106] FAULT_INJECTION: forcing a failure. [ 339.842816][ T9106] name failslab, interval 1, probability 0, space 0, times 0 [ 339.842850][ T9106] CPU: 0 UID: 0 PID: 9106 Comm: syz.2.1044 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 339.842873][ T9106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 339.842884][ T9106] Call Trace: [ 339.842892][ T9106] [ 339.842904][ T9106] dump_stack_lvl+0xe8/0x150 [ 339.842933][ T9106] should_fail_ex+0x46c/0x600 [ 339.842963][ T9106] should_failslab+0xa8/0x100 [ 339.842980][ T9106] __kmalloc_noprof+0xe0/0x7e0 [ 339.843004][ T9106] ? kfree+0x4d/0x900 [ 339.843023][ T9106] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 339.843049][ T9106] tomoyo_realpath_from_path+0xe3/0x5d0 [ 339.843069][ T9106] ? tomoyo_domain+0xd9/0x130 [ 339.843093][ T9106] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 339.843117][ T9106] tomoyo_path_number_perm+0x1e8/0x5a0 [ 339.843145][ T9106] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 339.843169][ T9106] ? __lock_acquire+0x6b6/0x2cf0 [ 339.843196][ T9106] ? do_raw_spin_lock+0x121/0x290 [ 339.843249][ T9106] ? __fget_files+0x2a/0x420 [ 339.843278][ T9106] ? __fget_files+0x2a/0x420 [ 339.843295][ T9106] ? __fget_files+0x3a6/0x420 [ 339.843312][ T9106] ? __fget_files+0x2a/0x420 [ 339.843334][ T9106] security_file_ioctl+0xcb/0x2d0 [ 339.843362][ T9106] __se_sys_ioctl+0x47/0x170 [ 339.843389][ T9106] do_syscall_64+0xec/0xf80 [ 339.843408][ T9106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.843426][ T9106] ? clear_bhb_loop+0x60/0xb0 [ 339.843448][ T9106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.843465][ T9106] RIP: 0033:0x7f35d727f749 [ 339.843482][ T9106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.843497][ T9106] RSP: 002b:00007f35d54e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 339.843517][ T9106] RAX: ffffffffffffffda RBX: 00007f35d74d5fa0 RCX: 00007f35d727f749 [ 339.843532][ T9106] RDX: 0000200000000640 RSI: 00000000c0145b0e RDI: 0000000000000004 [ 339.843544][ T9106] RBP: 00007f35d54e6090 R08: 0000000000000000 R09: 0000000000000000 [ 339.843556][ T9106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.843567][ T9106] R13: 00007f35d74d6038 R14: 00007f35d74d5fa0 R15: 00007fff6b5136e8 [ 339.843598][ T9106] [ 339.843660][ T9106] ERROR: Out of memory at tomoyo_realpath_from_path. [ 339.863009][ T43] usb 3-1: USB disconnect, device number 44 [ 340.839804][ T5992] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10 [ 340.936914][ T5992] usb 2-1: USB disconnect, device number 27 [ 341.367419][ T9131] FAULT_INJECTION: forcing a failure. [ 341.367419][ T9131] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 341.367961][ T9131] CPU: 0 UID: 0 PID: 9131 Comm: syz.3.1051 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 341.367984][ T9131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 341.367996][ T9131] Call Trace: [ 341.368004][ T9131] [ 341.368012][ T9131] dump_stack_lvl+0xe8/0x150 [ 341.368041][ T9131] should_fail_ex+0x46c/0x600 [ 341.368072][ T9131] prepare_alloc_pages+0x22b/0x6c0 [ 341.368099][ T9131] __alloc_frozen_pages_noprof+0x123/0x370 [ 341.368123][ T9131] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 341.368150][ T9131] ? policy_nodemask+0x27c/0x720 [ 341.368176][ T9131] ? __lock_acquire+0x6b6/0x2cf0 [ 341.368204][ T9131] alloc_pages_mpol+0xd1/0x380 [ 341.368226][ T9131] vma_alloc_folio_noprof+0xe4/0x280 [ 341.368242][ T9131] ? rcu_is_watching+0x15/0xb0 [ 341.368264][ T9131] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 341.368282][ T9131] ? ___pte_offset_map+0x29/0x200 [ 341.368307][ T9131] ? ___pte_offset_map+0x29/0x200 [ 341.368332][ T9131] folio_prealloc+0x30/0x180 [ 341.368360][ T9131] do_pte_missing+0x86a/0x27a0 [ 341.368388][ T9131] ? handle_mm_fault+0xd1/0x1330 [ 341.368415][ T9131] ? handle_mm_fault+0xd1/0x1330 [ 341.368439][ T9131] handle_mm_fault+0xcc1/0x1330 [ 341.368471][ T9131] ? handle_mm_fault+0xd1/0x1330 [ 341.368497][ T9131] ? __pfx_handle_mm_fault+0x10/0x10 [ 341.368520][ T9131] ? lock_vma_under_rcu+0x42c/0x4a0 [ 341.368572][ T9131] do_user_addr_fault+0xa7c/0x1380 [ 341.368602][ T9131] ? rcu_is_watching+0x15/0xb0 [ 341.368620][ T9131] ? trace_page_fault_user+0x84/0x1c0 [ 341.368643][ T9131] exc_page_fault+0x71/0xd0 [ 341.368663][ T9131] asm_exc_page_fault+0x26/0x30 [ 341.368681][ T9131] RIP: 0033:0x7f45c1e2a65b [ 341.368699][ T9131] Code: 00 00 00 48 8d 3d dd 5a 19 00 48 89 c1 31 c0 e8 2b 39 ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 11 5b 19 00 48 89 34 24 48 8b 14 24 48 8b [ 341.368715][ T9131] RSP: 002b:00007f45c01a3fb0 EFLAGS: 00010202 [ 341.368732][ T9131] RAX: 0000000000000000 RBX: 00007f45c21b6090 RCX: 0000000000000000 [ 341.368745][ T9131] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00002000000003c0 [ 341.368758][ T9131] RBP: 00007f45c01a5090 R08: 0000000000000000 R09: 0000000000000000 [ 341.368769][ T9131] R10: 00002000000003c0 R11: 0000000000000000 R12: 0000000000000001 [ 341.368782][ T9131] R13: 00007f45c21b6128 R14: 00007f45c21b6090 R15: 00007ffc32064368 [ 341.368813][ T9131] [ 341.369182][ T9131] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 343.420985][ T9142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1056'. [ 343.421012][ T9142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1056'. [ 345.658085][ T43] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 345.809157][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 345.812901][ T43] usb 5-1: config 128 has an invalid interface number: 153 but max is 1 [ 345.812929][ T43] usb 5-1: config 128 has an invalid interface number: 25 but max is 1 [ 345.812948][ T43] usb 5-1: config 128 contains an unexpected descriptor of type 0x1, skipping [ 345.812967][ T43] usb 5-1: config 128 has no interface number 0 [ 345.812983][ T43] usb 5-1: config 128 has no interface number 1 [ 345.813043][ T43] usb 5-1: config 128 interface 153 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 345.813063][ T43] usb 5-1: config 128 interface 153 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 345.813086][ T43] usb 5-1: config 128 interface 153 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 345.813107][ T43] usb 5-1: config 128 interface 153 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 345.813129][ T43] usb 5-1: config 128 interface 153 altsetting 3 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 345.813154][ T43] usb 5-1: config 128 interface 153 altsetting 3 endpoint 0x8A has invalid maxpacket 28503, setting to 64 [ 345.813180][ T43] usb 5-1: config 128 interface 153 altsetting 3 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 345.813221][ T43] usb 5-1: config 128 interface 25 altsetting 7 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 345.813248][ T43] usb 5-1: config 128 interface 25 altsetting 7 endpoint 0x9 has invalid maxpacket 431, setting to 64 [ 345.813274][ T43] usb 5-1: config 128 interface 25 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 345.813299][ T43] usb 5-1: config 128 interface 25 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 345.813323][ T43] usb 5-1: config 128 interface 25 altsetting 7 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 345.813347][ T43] usb 5-1: config 128 interface 25 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 345.813368][ T43] usb 5-1: config 128 interface 25 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 345.813390][ T43] usb 5-1: config 128 interface 153 has no altsetting 0 [ 345.813407][ T43] usb 5-1: config 128 interface 25 has no altsetting 0 [ 345.817395][ T43] usb 5-1: New USB device found, idVendor=067b, idProduct=aaa0, bcdDevice=85.0c [ 345.817420][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.817436][ T43] usb 5-1: Product: syz [ 345.817447][ T43] usb 5-1: Manufacturer: 쯫ᬰ途↧몒樷㒈닓拨윔宗䶹덨䄮᜴ꂮ䁯꘧녋㶅夻崠峴襔ኺौ恘푄ڀ䱀鬺㨐蘒酁㯼枊熒ⷻ逴䛽뜷ಅ橓ೠ伸³ᆛ託毬疉迥澲뙭桷嶗甞఺풝ᴺ踚䟼൱䗶캂쒱倝Ⳮｚ㸫돞㹗ᝋᯜ㶯끄效㸙䮌괒詏釫 [ 345.817470][ T43] usb 5-1: SerialNumber: syz [ 346.158460][ T9151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.169681][ T9151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.183339][ T43] pl2303 5-1:128.153: required endpoints missing [ 346.252128][ T43] pl2303 5-1:128.25: required endpoints missing [ 346.319171][ T43] usb 5-1: USB disconnect, device number 27 [ 346.416606][ T9182] nbd: must specify at least one socket [ 346.459363][ T5911] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 346.611127][ T5911] usb 4-1: Using ep0 maxpacket: 16 [ 346.615339][ T5911] usb 4-1: config 0 has no interfaces? [ 346.617544][ T5911] usb 4-1: New USB device found, idVendor=954f, idProduct=a199, bcdDevice= 0.09 [ 346.617574][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 346.617594][ T5911] usb 4-1: Product: syz [ 346.617608][ T5911] usb 4-1: SerialNumber: syz [ 346.641214][ T5911] usb 4-1: config 0 descriptor?? [ 347.536503][ T9198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1066'. [ 347.703982][ T9200] overlayfs: failed to create directory ./bus/work (errno: 1); mounting read-only [ 347.849667][ T924] usb 4-1: USB disconnect, device number 29 [ 348.174965][ T9212] nbd: must specify at least one socket [ 348.407764][ T9218] FAULT_INJECTION: forcing a failure. [ 348.407764][ T9218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.407821][ T9218] CPU: 0 UID: 0 PID: 9218 Comm: syz.2.1080 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 348.407843][ T9218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 348.407856][ T9218] Call Trace: [ 348.407864][ T9218] [ 348.407872][ T9218] dump_stack_lvl+0xe8/0x150 [ 348.407903][ T9218] should_fail_ex+0x46c/0x600 [ 348.407933][ T9218] _copy_from_user+0x2d/0xb0 [ 348.407953][ T9218] ___sys_sendmsg+0x158/0x2a0 [ 348.407979][ T9218] ? __pfx____sys_sendmsg+0x10/0x10 [ 348.408023][ T9218] ? irqentry_exit+0x5e8/0x670 [ 348.408069][ T9218] __x64_sys_sendmsg+0x1a1/0x260 [ 348.408095][ T9218] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 348.408127][ T9218] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 348.408160][ T9218] do_syscall_64+0xec/0xf80 [ 348.408178][ T9218] ? rcu_is_watching+0x15/0xb0 [ 348.408194][ T9218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.408213][ T9218] ? clear_bhb_loop+0x60/0xb0 [ 348.408235][ T9218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.408253][ T9218] RIP: 0033:0x7f35d727f749 [ 348.408270][ T9218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.408288][ T9218] RSP: 002b:00007f35d54a4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.408309][ T9218] RAX: ffffffffffffffda RBX: 00007f35d74d6180 RCX: 00007f35d727f749 [ 348.408323][ T9218] RDX: 0000000024008002 RSI: 0000200000000000 RDI: 0000000000000003 [ 348.408344][ T9218] RBP: 00007f35d54a4090 R08: 0000000000000000 R09: 0000000000000000 [ 348.408357][ T9218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.408369][ T9218] R13: 00007f35d74d6218 R14: 00007f35d74d6180 R15: 00007fff6b5136e8 [ 348.408450][ T9218] [ 349.105441][ T9221] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1084'. [ 350.187629][ T9232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1089'. [ 350.354596][ T9232] Can't find ip_set type hash:net,tort,net [ 350.439901][ T9229] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 351.309288][ T5911] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 351.479644][ T5911] usb 3-1: Using ep0 maxpacket: 32 [ 351.482323][ T5911] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 351.482349][ T5911] usb 3-1: config 0 has no interface number 0 [ 351.482379][ T5911] usb 3-1: config 0 interface 85 has no altsetting 0 [ 351.484984][ T5911] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 351.485012][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.485027][ T5911] usb 3-1: Product: syz [ 351.485038][ T5911] usb 3-1: Manufacturer: syz [ 351.485048][ T5911] usb 3-1: SerialNumber: syz [ 351.554011][ T5911] usb 3-1: config 0 descriptor?? [ 351.577324][ T5911] appletouch 3-1:0.85: Could not find int-in endpoint [ 351.577360][ T5911] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 351.585264][ T5911] usbhid 3-1:0.85: couldn't find an input interrupt endpoint [ 351.709209][ T5866] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 351.839273][ T5866] usb 4-1: device descriptor read/64, error -71 [ 352.264915][ T5866] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 352.449225][ T5866] usb 4-1: device descriptor read/64, error -71 [ 352.740795][ T5866] usb usb4-port1: attempt power cycle [ 353.509213][ T5866] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 353.530858][ T5866] usb 4-1: device descriptor read/8, error -71 [ 353.535184][ T43] usb 3-1: USB disconnect, device number 45 [ 353.779226][ T5866] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 353.799912][ T5866] usb 4-1: device descriptor read/8, error -71 [ 353.872291][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.872311][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.882067][ T9282] netlink: 316 bytes leftover after parsing attributes in process `syz.4.1105'. [ 353.909745][ T5866] usb usb4-port1: unable to enumerate USB device [ 355.216793][ T9287] comedi comedi3: pcmmio: I/O port conflict (0x4f28,32) [ 355.259378][ T5992] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 355.409169][ T5992] usb 4-1: Using ep0 maxpacket: 16 [ 355.412873][ T5992] usb 4-1: config 68 has an invalid interface number: 49 but max is 1 [ 355.412907][ T5992] usb 4-1: config 68 has an invalid interface association descriptor of length 5, skipping [ 355.412924][ T5992] usb 4-1: config 68 has an invalid interface number: 139 but max is 1 [ 355.412942][ T5992] usb 4-1: config 68 has no interface number 0 [ 355.412957][ T5992] usb 4-1: config 68 has no interface number 1 [ 355.413014][ T5992] usb 4-1: config 68 interface 49 altsetting 85 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 355.413039][ T5992] usb 4-1: config 68 interface 49 altsetting 85 has an invalid descriptor for endpoint zero, skipping [ 355.413061][ T5992] usb 4-1: config 68 interface 49 altsetting 85 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 355.413085][ T5992] usb 4-1: config 68 interface 49 altsetting 85 has a duplicate endpoint with address 0x5, skipping [ 355.413106][ T5992] usb 4-1: config 68 interface 49 altsetting 85 has a duplicate endpoint with address 0x4, skipping [ 355.413126][ T5992] usb 4-1: config 68 interface 49 has no altsetting 0 [ 355.413142][ T5992] usb 4-1: config 68 interface 139 has no altsetting 0 [ 355.420577][ T5992] usb 4-1: New USB device found, idVendor=0af0, idProduct=6731, bcdDevice=91.06 [ 355.420607][ T5992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.420625][ T5992] usb 4-1: Product: syz [ 355.420639][ T5992] usb 4-1: Manufacturer: 见툓ﶣ멀㍊㒰﯄ꢩ耩쮶柜湳勁ꡅ㎐榱ᴴ뭿뇁곊῀厓Ⰵ [ 355.420656][ T5992] usb 4-1: SerialNumber: syz [ 355.465176][ T5992] usb 4-1: Interface #139 referenced by multiple IADs [ 355.983535][ T9293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.984398][ T9293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.827084][ T37] audit: type=1326 audit(1767704849.437:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9274 comm="syz.0.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb1b6f749 code=0x7ffc0000 [ 356.830703][ T5992] hso 4-1:68.49: Not our interface [ 356.922910][ T5992] hso 4-1:68.139: Not our interface [ 356.989613][ T5992] usb 4-1: USB disconnect, device number 34 [ 357.419817][ T6080] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 357.886998][ T6080] usb 3-1: Using ep0 maxpacket: 32 [ 357.903809][ T9314] netlink: 'syz.3.1117': attribute type 4 has an invalid length. [ 357.953854][ T6080] usb 3-1: config 128 has an invalid interface number: 153 but max is 1 [ 357.953883][ T6080] usb 3-1: config 128 has an invalid interface number: 25 but max is 1 [ 357.953902][ T6080] usb 3-1: config 128 contains an unexpected descriptor of type 0x1, skipping [ 357.953966][ T6080] usb 3-1: config 128 has no interface number 0 [ 357.953980][ T6080] usb 3-1: config 128 has no interface number 1 [ 357.954038][ T6080] usb 3-1: config 128 interface 153 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 357.954052][ T6080] usb 3-1: config 128 interface 153 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 357.954064][ T6080] usb 3-1: config 128 interface 153 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 357.954075][ T6080] usb 3-1: config 128 interface 153 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 357.954086][ T6080] usb 3-1: config 128 interface 153 altsetting 3 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 357.954099][ T6080] usb 3-1: config 128 interface 153 altsetting 3 endpoint 0x8A has invalid maxpacket 28503, setting to 64 [ 357.954112][ T6080] usb 3-1: config 128 interface 153 altsetting 3 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 357.954136][ T6080] usb 3-1: config 128 interface 25 altsetting 7 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 357.954150][ T6080] usb 3-1: config 128 interface 25 altsetting 7 endpoint 0x9 has invalid maxpacket 431, setting to 64 [ 357.954163][ T6080] usb 3-1: config 128 interface 25 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 357.954176][ T6080] usb 3-1: config 128 interface 25 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 357.954188][ T6080] usb 3-1: config 128 interface 25 altsetting 7 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 357.954200][ T6080] usb 3-1: config 128 interface 25 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 357.954210][ T6080] usb 3-1: config 128 interface 25 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 357.954221][ T6080] usb 3-1: config 128 interface 153 has no altsetting 0 [ 357.954229][ T6080] usb 3-1: config 128 interface 25 has no altsetting 0 [ 357.957337][ T6080] usb 3-1: New USB device found, idVendor=067b, idProduct=aaa0, bcdDevice=85.0c [ 357.957361][ T6080] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.957371][ T6080] usb 3-1: Product: syz [ 357.957379][ T6080] usb 3-1: Manufacturer: 쯫ᬰ途↧몒樷㒈닓拨윔宗䶹덨䄮᜴ꂮ䁯꘧녋㶅夻崠峴襔ኺौ恘푄ڀ䱀鬺㨐蘒酁㯼枊熒ⷻ逴䛽뜷ಅ橓ೠ伸³ᆛ託毬疉迥澲뙭桷嶗甞఺풝ᴺ踚䟼൱䗶캂쒱倝Ⳮｚ㸫돞㹗ᝋᯜ㶯끄效㸙䮌괒詏釫 [ 357.957393][ T6080] usb 3-1: SerialNumber: syz [ 358.471357][ T9320] FAULT_INJECTION: forcing a failure. [ 358.471357][ T9320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.471392][ T9320] CPU: 1 UID: 0 PID: 9320 Comm: syz.3.1120 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 358.471414][ T9320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 358.471425][ T9320] Call Trace: [ 358.471432][ T9320] [ 358.471441][ T9320] dump_stack_lvl+0xe8/0x150 [ 358.471471][ T9320] should_fail_ex+0x46c/0x600 [ 358.471501][ T9320] _copy_from_user+0x2d/0xb0 [ 358.471521][ T9320] ___sys_sendmsg+0x158/0x2a0 [ 358.471548][ T9320] ? __pfx____sys_sendmsg+0x10/0x10 [ 358.471575][ T9320] ? kstrtouint+0x6e/0xe0 [ 358.471632][ T9320] ? __fget_files+0x2a/0x420 [ 358.471651][ T9320] ? __fget_files+0x3a6/0x420 [ 358.471678][ T9320] __sys_sendmmsg+0x22d/0x430 [ 358.471705][ T9320] ? __pfx___sys_sendmmsg+0x10/0x10 [ 358.471734][ T9320] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 358.471774][ T9320] ? ksys_write+0x230/0x260 [ 358.471800][ T9320] ? __pfx_ksys_write+0x10/0x10 [ 358.471827][ T9320] __x64_sys_sendmmsg+0xa0/0xc0 [ 358.471849][ T9320] do_syscall_64+0xec/0xf80 [ 358.471866][ T9320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.471882][ T9320] ? trace_irq_disable+0x37/0x100 [ 358.471901][ T9320] ? clear_bhb_loop+0x60/0xb0 [ 358.471922][ T9320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.471940][ T9320] RIP: 0033:0x7f45c1f5f749 [ 358.471957][ T9320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.471972][ T9320] RSP: 002b:00007f45c01c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 358.471994][ T9320] RAX: ffffffffffffffda RBX: 00007f45c21b5fa0 RCX: 00007f45c1f5f749 [ 358.472008][ T9320] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003 [ 358.472020][ T9320] RBP: 00007f45c01c6090 R08: 0000000000000000 R09: 0000000000000000 [ 358.472032][ T9320] R10: 000000000000c040 R11: 0000000000000246 R12: 0000000000000001 [ 358.472044][ T9320] R13: 00007f45c21b6038 R14: 00007f45c21b5fa0 R15: 00007ffc32064368 [ 358.472074][ T9320] [ 358.518032][ T9316] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 358.912230][ T9326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.912753][ T9326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.031497][ T6080] pl2303 3-1:128.153: required endpoints missing [ 359.096298][ T6080] pl2303 3-1:128.25: required endpoints missing [ 359.219218][ T5884] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 359.235615][ T6080] usb 3-1: USB disconnect, device number 46 [ 359.590948][ T9332] netlink: 'syz.1.1122': attribute type 21 has an invalid length. [ 359.591050][ T9332] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1122'. [ 359.591086][ T9332] netlink: 'syz.1.1122': attribute type 1 has an invalid length. [ 362.300012][ T9370] netlink: 'syz.0.1136': attribute type 21 has an invalid length. [ 362.300107][ T9370] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1136'. [ 362.300142][ T9370] netlink: 'syz.0.1136': attribute type 1 has an invalid length. [ 362.940865][ T5884] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 363.096565][ T5884] usb 5-1: Using ep0 maxpacket: 16 [ 363.101505][ T5884] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 363.101531][ T5884] usb 5-1: config 0 has no interface number 0 [ 363.120992][ T5884] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 363.121022][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.121041][ T5884] usb 5-1: Product: syz [ 363.121054][ T5884] usb 5-1: Manufacturer: syz [ 363.121068][ T5884] usb 5-1: SerialNumber: syz [ 363.144452][ T5884] usb 5-1: config 0 descriptor?? [ 363.153865][ T5884] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 364.567084][ T9361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.570063][ T9361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.781487][ T5884] gspca_xirlink_cit: Failed to write a register (index 0x0400, value 0x01, error -71) [ 364.790995][ T5884] gspca_xirlink_cit: Failed to write a register (index 0x0420, value 0x00, error -71) [ 364.791388][ T5884] gspca_xirlink_cit: Failed to write a register (index 0x0420, value 0x01, error -71) [ 364.791920][ T5884] gspca_xirlink_cit: Failed to write a register (index 0x0409, value 0x0D, error -71) [ 364.792311][ T5884] gspca_xirlink_cit: Failed to write a register (index 0x040A, value 0x02, error -71) [ 364.792693][ T5884] gspca_xirlink_cit: Failed to write a register (index 0x0405, value 0x18, error -71) [ 364.793079][ T5884] gspca_xirlink_cit: Failed to write a register (index 0x0435, value 0x08, error -71) [ 364.793587][ T5884] gspca_xirlink_cit: Failed to write a register (index 0x040B, value 0x26, error -71) [ 364.793960][ T5884] gspca_xirlink_cit: Failed to write a register (index 0x0437, value 0x07, error -71) [ 364.794334][ T5884] gspca_xirlink_cit: Failed to write a register (index 0x042F, value 0x15, error -71) [ 364.794713][ T5884] gspca_xirlink_cit: Failed to write a register (index 0x0439, value 0x2B, error -71) [ 364.795122][ T5884] gspca_xirlink_cit: Failed to write a register (index 0x043A, value 0x26, error -71) [ 364.795532][ T5884] gspca_xirlink_cit: Failed to write a register (index 0x0438, value 0x08, error -71) [ 364.795912][ T5884] gspca_xirlink_cit: Failed to write a register (index 0x042B, value 0x1E, error -71) [ 364.796301][ T5884] gspca_xirlink_cit: Failed to write a register (index 0x042C, value 0x41, error -71) [ 364.796700][ T5884] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0xC0, error -71) [ 364.804730][ T5884] input: xirlink-cit as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11 [ 364.821233][ T5884] usb 5-1: USB disconnect, device number 29 [ 367.918681][ T9447] sit0: entered promiscuous mode [ 367.918873][ T9447] netlink: 'syz.0.1164': attribute type 1 has an invalid length. [ 367.918891][ T9447] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1164'. [ 368.309264][ T5884] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 368.459269][ T5884] usb 4-1: Using ep0 maxpacket: 32 [ 368.464959][ T5884] usb 4-1: config 128 has an invalid interface number: 153 but max is 1 [ 368.464987][ T5884] usb 4-1: config 128 has an invalid interface number: 25 but max is 1 [ 368.465004][ T5884] usb 4-1: config 128 contains an unexpected descriptor of type 0x1, skipping [ 368.465022][ T5884] usb 4-1: config 128 has no interface number 0 [ 368.465038][ T5884] usb 4-1: config 128 has no interface number 1 [ 368.465091][ T5884] usb 4-1: config 128 interface 153 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 368.465103][ T5884] usb 4-1: config 128 interface 153 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 368.465123][ T5884] usb 4-1: config 128 interface 153 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 368.465134][ T5884] usb 4-1: config 128 interface 153 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 368.465146][ T5884] usb 4-1: config 128 interface 153 altsetting 3 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 368.465158][ T5884] usb 4-1: config 128 interface 153 altsetting 3 endpoint 0x8A has invalid maxpacket 28503, setting to 64 [ 368.465172][ T5884] usb 4-1: config 128 interface 153 altsetting 3 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 368.465194][ T5884] usb 4-1: config 128 interface 25 altsetting 7 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 368.465208][ T5884] usb 4-1: config 128 interface 25 altsetting 7 endpoint 0x9 has invalid maxpacket 431, setting to 64 [ 368.465222][ T5884] usb 4-1: config 128 interface 25 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 368.465234][ T5884] usb 4-1: config 128 interface 25 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 368.465247][ T5884] usb 4-1: config 128 interface 25 altsetting 7 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 368.465259][ T5884] usb 4-1: config 128 interface 25 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 368.465270][ T5884] usb 4-1: config 128 interface 25 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 368.465281][ T5884] usb 4-1: config 128 interface 153 has no altsetting 0 [ 368.465290][ T5884] usb 4-1: config 128 interface 25 has no altsetting 0 [ 368.616252][ T5884] usb 4-1: New USB device found, idVendor=067b, idProduct=aaa0, bcdDevice=85.0c [ 368.616283][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.616302][ T5884] usb 4-1: Product: syz [ 368.616315][ T5884] usb 4-1: Manufacturer: 쯫ᬰ途↧몒樷㒈닓拨윔宗䶹덨䄮᜴ꂮ䁯꘧녋㶅夻崠峴襔ኺौ恘푄ڀ䱀鬺㨐蘒酁㯼枊熒ⷻ逴䛽뜷ಅ橓ೠ伸³ᆛ託毬疉迥澲뙭桷嶗甞఺풝ᴺ踚䟼൱䗶캂쒱倝Ⳮｚ㸫돞㹗ᝋᯜ㶯끄效㸙䮌괒詏釫 [ 368.616343][ T5884] usb 4-1: SerialNumber: syz [ 368.956255][ T9443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.958675][ T9443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.030316][ T5884] pl2303 4-1:128.153: required endpoints missing [ 370.542686][ T5884] pl2303 4-1:128.25: required endpoints missing [ 370.621081][ T5884] usb 4-1: USB disconnect, device number 35 [ 370.822935][ T6080] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 370.973260][ T6080] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.973294][ T6080] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.973320][ T6080] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 370.973332][ T6080] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.977104][ T6080] usb 2-1: config 0 descriptor?? [ 371.559182][ T6080] usbhid 2-1:0.0: can't add hid device: -71 [ 371.561666][ T6080] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 371.579649][ T6080] usb 2-1: USB disconnect, device number 28 [ 372.921158][ T9498] FAULT_INJECTION: forcing a failure. [ 372.921158][ T9498] name failslab, interval 1, probability 0, space 0, times 0 [ 372.921210][ T9498] CPU: 0 UID: 0 PID: 9498 Comm: syz.3.1179 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 372.921233][ T9498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 372.921249][ T9498] Call Trace: [ 372.921260][ T9498] [ 372.921269][ T9498] dump_stack_lvl+0xe8/0x150 [ 372.921299][ T9498] should_fail_ex+0x46c/0x600 [ 372.921330][ T9498] should_failslab+0xa8/0x100 [ 372.921350][ T9498] __kmalloc_cache_noprof+0x84/0x6d0 [ 372.921378][ T9498] ? fuse_dev_do_write+0x4b8/0x47e0 [ 372.921403][ T9498] fuse_dev_do_write+0x4b8/0x47e0 [ 372.921430][ T9498] ? is_bpf_text_address+0x26/0x2b0 [ 372.921460][ T9498] ? __lock_acquire+0x6b6/0x2cf0 [ 372.921493][ T9498] ? __pfx_fuse_dev_do_write+0x10/0x10 [ 372.921507][ T9498] ? is_bpf_text_address+0x26/0x2b0 [ 372.921525][ T9498] ? do_sys_openat2+0x15a/0x200 [ 372.921542][ T9498] ? kernel_text_address+0xa5/0xe0 [ 372.921569][ T9498] ? __kernel_text_address+0xd/0x40 [ 372.921601][ T9498] ? __lock_acquire+0x6b6/0x2cf0 [ 372.921627][ T9498] ? _parse_integer_limit+0x1ae/0x1f0 [ 372.921656][ T9498] ? kstrtoull+0x12f/0x1d0 [ 372.921681][ T9498] ? kstrtouint+0x6e/0xe0 [ 372.921705][ T9498] ? get_pid_task+0x20/0x1f0 [ 372.921739][ T9498] fuse_dev_write+0x157/0x1e0 [ 372.921765][ T9498] ? __pfx_fuse_dev_write+0x10/0x10 [ 372.921801][ T9498] vfs_write+0x5d5/0xb40 [ 372.921830][ T9498] ? __pfx_fuse_dev_write+0x10/0x10 [ 372.921850][ T9498] ? __pfx_vfs_write+0x10/0x10 [ 372.921883][ T9498] ? __fget_files+0x2a/0x420 [ 372.921912][ T9498] ksys_write+0x14b/0x260 [ 372.921939][ T9498] ? __pfx_ksys_write+0x10/0x10 [ 372.921973][ T9498] do_syscall_64+0xec/0xf80 [ 372.921993][ T9498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.922011][ T9498] ? trace_irq_disable+0x37/0x100 [ 372.922030][ T9498] ? clear_bhb_loop+0x60/0xb0 [ 372.922053][ T9498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.922071][ T9498] RIP: 0033:0x7f45c1f5f749 [ 372.922088][ T9498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.922106][ T9498] RSP: 002b:00007f45c01c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 372.922127][ T9498] RAX: ffffffffffffffda RBX: 00007f45c21b5fa0 RCX: 00007f45c1f5f749 [ 372.922147][ T9498] RDX: 0000000000000028 RSI: 0000200000000000 RDI: 0000000000000003 [ 372.922160][ T9498] RBP: 00007f45c01c6090 R08: 0000000000000000 R09: 0000000000000000 [ 372.922173][ T9498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.922185][ T9498] R13: 00007f45c21b6038 R14: 00007f45c21b5fa0 R15: 00007ffc32064368 [ 372.922217][ T9498] [ 373.458876][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.458897][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.061188][ T43] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 374.075600][ T9521] netlink: 'syz.0.1176': attribute type 1 has an invalid length. [ 374.075623][ T9521] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1176'. [ 374.269241][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 374.288080][ T43] usb 2-1: config 68 has an invalid interface number: 49 but max is 1 [ 374.288111][ T43] usb 2-1: config 68 has an invalid interface association descriptor of length 7, skipping [ 374.288130][ T43] usb 2-1: config 68 has an invalid interface number: 139 but max is 1 [ 374.288150][ T43] usb 2-1: config 68 has no interface number 0 [ 374.288167][ T43] usb 2-1: config 68 has no interface number 1 [ 374.288233][ T43] usb 2-1: config 68 interface 49 altsetting 85 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 374.288259][ T43] usb 2-1: config 68 interface 49 altsetting 85 has an invalid descriptor for endpoint zero, skipping [ 374.288281][ T43] usb 2-1: config 68 interface 49 altsetting 85 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 374.288307][ T43] usb 2-1: config 68 interface 49 altsetting 85 has a duplicate endpoint with address 0x5, skipping [ 374.288329][ T43] usb 2-1: config 68 interface 49 altsetting 85 has a duplicate endpoint with address 0x4, skipping [ 374.288351][ T43] usb 2-1: config 68 interface 49 has no altsetting 0 [ 374.288369][ T43] usb 2-1: config 68 interface 139 has no altsetting 0 [ 374.401180][ T43] usb 2-1: New USB device found, idVendor=0af0, idProduct=6731, bcdDevice=91.06 [ 374.401210][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.401229][ T43] usb 2-1: Product: syz [ 374.401243][ T43] usb 2-1: Manufacturer: 见툓ﶣ멀㍊㒰﯄ꢩ耩쮶柜湳勁ꡅ㎐榱ᴴ뭿뇁곊῀厓Ⰵ [ 374.401260][ T43] usb 2-1: SerialNumber: syz [ 374.408813][ T43] usb 2-1: Interface #139 referenced by multiple IADs [ 374.451454][ T5992] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 375.633555][ T5992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.633594][ T5992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.633632][ T5992] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 375.633654][ T5992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.653215][ T5992] usb 4-1: config 0 descriptor?? [ 375.721391][ T9514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.741732][ T9514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.766490][ T43] hso 2-1:68.49: Not our interface [ 375.817759][ T43] hso 2-1:68.139: Not our interface [ 375.837414][ T43] usb 2-1: USB disconnect, device number 29 [ 376.274663][ T5992] usbhid 4-1:0.0: can't add hid device: -71 [ 376.274781][ T5992] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 376.280962][ T5992] usb 4-1: USB disconnect, device number 36 [ 377.915262][ T3891] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 378.528812][ T9563] netlink: 'syz.3.1201': attribute type 1 has an invalid length. [ 378.528834][ T9563] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1201'. [ 378.792419][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.792490][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.755049][ T9577] comedi comedi4: bad chanlist[0]=0x04040007 chan=7 range length=2 [ 380.049300][ T5911] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 381.702567][ T5911] usb 2-1: not running at top speed; connect to a high speed hub [ 381.704969][ T5911] usb 2-1: config 8 has an invalid interface number: 241 but max is 0 [ 381.704993][ T5911] usb 2-1: config 8 has no interface number 0 [ 381.705040][ T5911] usb 2-1: config 8 interface 241 has no altsetting 0 [ 381.708819][ T5911] usb 2-1: New USB device found, idVendor=0c52, idProduct=2843, bcdDevice=ca.31 [ 381.708846][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.708864][ T5911] usb 2-1: Product: 䟺㪩漈ఈ⺐익놼禡⋥쒓–㏱㫠翿攃䨈戼䏇栾䛸אּ滲铹贮㽼만爢뻥糞듵梫ꢝ읏赁娇鬩嬆鮷펆㞙鋆壡ᡘ㙺៽煾蔷얞㔍蹓ౙ흂帗曚⓿릧カ肠ꇎ몥荖ì扉㱉䴱妾ᵻ곫吶羵ݮ孹倊㨬桋稟囻 [ 381.708891][ T5911] usb 2-1: Manufacturer: 릕⏪㼬棧谤㥁渚ᐡ皽鎸꓿폶ၖ㓢ร戎쀥ꙅ꽌좖义熋芈氞铳ᬽ稵ﵞ蓖⢗烶☑밋챉뉇쁋軖鱥獜軁믛℮諽ᴿ噓≄幎ᐸ싺晐匚湮髏릭㙢䵐∾돡ዱ䉉⚺閶談啕䣖㋛럑¾拝ར핍湣ꎮᒵ⃵柛뺖ᚻ〟돜음쒔⏳웯伙팪첹⁍竵暎㾡탲Ź朦퍂옩⍍ក [ 381.708922][ T5911] usb 2-1: SerialNumber: ఉ [ 381.940057][ T5812] Bluetooth: hci4: command 0x0406 tx timeout [ 383.339255][ T43] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 383.414354][ T9607] netlink: 'syz.4.1214': attribute type 1 has an invalid length. [ 383.414378][ T9607] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1214'. [ 383.441962][ T5911] ftdi_sio 2-1:8.241: FTDI USB Serial Device converter detected [ 383.443848][ T5911] ftdi_sio ttyUSB0: unknown device type: 0xca31 [ 383.481744][ T5911] usb 2-1: USB disconnect, device number 30 [ 383.503565][ T5911] ftdi_sio 2-1:8.241: device disconnected [ 383.519239][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 383.526088][ T43] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 383.526116][ T43] usb 4-1: config 0 has no interface number 0 [ 383.526163][ T43] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 383.526188][ T43] usb 4-1: config 0 interface 126 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0 [ 383.526211][ T43] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 0 [ 383.526233][ T43] usb 4-1: config 0 interface 126 has no altsetting 0 [ 383.547092][ T9610] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1216'. [ 383.602985][ T43] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 383.603014][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.603040][ T43] usb 4-1: Product: syz [ 383.603054][ T43] usb 4-1: Manufacturer: syz [ 383.603067][ T43] usb 4-1: SerialNumber: syz [ 383.661242][ T43] usb 4-1: config 0 descriptor?? [ 383.662470][ T9603] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 385.299429][ T5992] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 385.449550][ T5992] usb 5-1: Using ep0 maxpacket: 16 [ 385.475967][ T5992] usb 5-1: config 68 has an invalid interface number: 49 but max is 1 [ 385.475995][ T5992] usb 5-1: config 68 has an invalid interface number: 139 but max is 1 [ 385.476014][ T5992] usb 5-1: config 68 has no interface number 0 [ 385.476029][ T5992] usb 5-1: config 68 has no interface number 1 [ 385.476084][ T5992] usb 5-1: config 68 interface 49 altsetting 85 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 385.476111][ T5992] usb 5-1: config 68 interface 49 altsetting 85 has an invalid descriptor for endpoint zero, skipping [ 385.476133][ T5992] usb 5-1: config 68 interface 49 altsetting 85 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 385.476157][ T5992] usb 5-1: config 68 interface 49 altsetting 85 has a duplicate endpoint with address 0x4, skipping [ 385.476179][ T5992] usb 5-1: config 68 interface 49 has no altsetting 0 [ 385.476196][ T5992] usb 5-1: config 68 interface 139 has no altsetting 0 [ 385.611894][ T5992] usb 5-1: New USB device found, idVendor=0af0, idProduct=6731, bcdDevice=91.06 [ 385.611925][ T5992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.611944][ T5992] usb 5-1: Product: syz [ 385.611957][ T5992] usb 5-1: Manufacturer: 见툓ﶣ멀㍊㒰﯄ꢩ耩쮶柜湳勁ꡅ㎐榱ᴴ뭿뇁곊῀厓Ⰵ [ 385.611976][ T5992] usb 5-1: SerialNumber: syz [ 385.643099][ T5992] usb 5-1: Interface #139 referenced by multiple IADs [ 386.253174][ T43] ir_usb 4-1:0.126: IR Dongle converter detected [ 386.256384][ T43] usb 4-1: IRDA class descriptor not found, device not bound [ 386.302179][ T43] usb 4-1: USB disconnect, device number 37 [ 386.483590][ T9622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.516596][ T9622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.657940][ T5992] hso 5-1:68.49: Not our interface [ 386.722883][ T5992] hso 5-1:68.139: Not our interface [ 386.746387][ T5992] usb 5-1: USB disconnect, device number 30 [ 387.777009][ T9649] netlink: 'syz.4.1228': attribute type 1 has an invalid length. [ 387.777031][ T9649] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1228'. [ 390.469435][ T6299] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 390.641435][ T6299] usb 5-1: Using ep0 maxpacket: 32 [ 390.657969][ T6299] usb 5-1: config 128 has an invalid interface number: 153 but max is 1 [ 390.657997][ T6299] usb 5-1: config 128 has an invalid interface number: 25 but max is 1 [ 390.658017][ T6299] usb 5-1: config 128 contains an unexpected descriptor of type 0x1, skipping [ 390.658036][ T6299] usb 5-1: config 128 has no interface number 0 [ 390.658052][ T6299] usb 5-1: config 128 has no interface number 1 [ 390.667489][ T6299] usb 5-1: config 128 interface 153 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 390.667517][ T6299] usb 5-1: config 128 interface 153 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 390.667540][ T6299] usb 5-1: config 128 interface 153 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 390.667562][ T6299] usb 5-1: config 128 interface 153 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 390.667583][ T6299] usb 5-1: config 128 interface 153 altsetting 3 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 390.667607][ T6299] usb 5-1: config 128 interface 153 altsetting 3 endpoint 0x8A has invalid maxpacket 28503, setting to 64 [ 390.667632][ T6299] usb 5-1: config 128 interface 153 altsetting 3 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 390.667672][ T6299] usb 5-1: config 128 interface 25 altsetting 7 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 390.667698][ T6299] usb 5-1: config 128 interface 25 altsetting 7 endpoint 0x9 has invalid maxpacket 431, setting to 64 [ 390.667723][ T6299] usb 5-1: config 128 interface 25 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 390.667746][ T6299] usb 5-1: config 128 interface 25 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 390.667768][ T6299] usb 5-1: config 128 interface 25 altsetting 7 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 390.667791][ T6299] usb 5-1: config 128 interface 25 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 390.667809][ T6299] usb 5-1: config 128 interface 25 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 390.667828][ T6299] usb 5-1: config 128 interface 153 has no altsetting 0 [ 390.667844][ T6299] usb 5-1: config 128 interface 25 has no altsetting 0 [ 390.737086][ T6299] usb 5-1: New USB device found, idVendor=067b, idProduct=aaa0, bcdDevice=85.0c [ 390.737114][ T6299] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.737133][ T6299] usb 5-1: Product: syz [ 390.737146][ T6299] usb 5-1: Manufacturer: 쯫ᬰ途↧몒樷㒈닓拨윔宗䶹덨䄮᜴ꂮ䁯꘧녋㶅夻崠峴襔ኺौ恘푄ڀ䱀鬺㨐蘒酁㯼枊熒ⷻ逴䛽뜷ಅ橓ೠ伸³ᆛ託毬疉迥澲뙭桷嶗甞఺풝ᴺ踚䟼൱䗶캂쒱倝Ⳮｚ㸫돞㹗ᝋᯜ㶯끄效㸙䮌괒詏釫 [ 390.737173][ T6299] usb 5-1: SerialNumber: syz [ 391.051867][ T6299] pl2303 5-1:128.153: required endpoints missing [ 391.091309][ T6299] pl2303 5-1:128.25: required endpoints missing [ 391.145918][ T6299] usb 5-1: USB disconnect, device number 31 [ 393.099492][ T43] usb 5-1: new low-speed USB device number 32 using dummy_hcd [ 393.262233][ T43] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 393.262291][ T43] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 393.262325][ T43] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 393.262348][ T43] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 393.262371][ T43] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 393.267661][ T43] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 393.267715][ T43] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 393.267742][ T43] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 393.267764][ T43] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 393.267787][ T43] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 393.269655][ T43] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 393.269706][ T43] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 393.269731][ T43] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 393.269754][ T43] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 393.269778][ T43] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 393.321171][ T43] usb 5-1: string descriptor 0 read error: -22 [ 393.321340][ T43] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 393.321362][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.415917][ T43] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 394.751376][ T9754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1249'. [ 395.520473][ T9764] overlayfs: failed to create directory ./bus/work (errno: 1); mounting read-only [ 395.689225][ T5992] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 395.839305][ T5992] usb 3-1: Using ep0 maxpacket: 16 [ 395.845283][ T5992] usb 3-1: config 68 has an invalid interface number: 49 but max is 1 [ 395.845310][ T5992] usb 3-1: config 68 has an invalid interface number: 139 but max is 1 [ 395.845329][ T5992] usb 3-1: config 68 has no interface number 0 [ 395.845344][ T5992] usb 3-1: config 68 has no interface number 1 [ 395.845404][ T5992] usb 3-1: config 68 interface 49 altsetting 85 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 395.845429][ T5992] usb 3-1: config 68 interface 49 altsetting 85 has an invalid descriptor for endpoint zero, skipping [ 395.845451][ T5992] usb 3-1: config 68 interface 49 altsetting 85 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 395.845477][ T5992] usb 3-1: config 68 interface 49 altsetting 85 has a duplicate endpoint with address 0x4, skipping [ 395.845498][ T5992] usb 3-1: config 68 interface 49 has no altsetting 0 [ 395.845516][ T5992] usb 3-1: config 68 interface 139 has no altsetting 0 [ 395.848220][ T5992] usb 3-1: New USB device found, idVendor=0af0, idProduct=6731, bcdDevice=91.06 [ 395.848245][ T5992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.848263][ T5992] usb 3-1: Product: syz [ 395.848276][ T5992] usb 3-1: Manufacturer: 见툓ﶣ멀㍊㒰﯄ꢩ耩쮶柜湳勁ꡅ㎐榱ᴴ뭿뇁곊῀厓Ⰵ [ 395.848292][ T5992] usb 3-1: SerialNumber: syz [ 396.161158][ T6080] usb 5-1: USB disconnect, device number 32 [ 396.272248][ T5992] usb 3-1: Interface #139 referenced by multiple IADs [ 396.693098][ T9762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.693861][ T9762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.741050][ T5992] hso 3-1:68.49: Not our interface [ 396.757222][ T5992] hso 3-1:68.139: Not our interface [ 396.763121][ T5992] usb 3-1: USB disconnect, device number 47 [ 398.514479][ T9800] overlayfs: failed to create directory ./bus/work (errno: 1); mounting read-only [ 398.729224][ T43] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 398.849242][ T6080] usb 3-1: new low-speed USB device number 48 using dummy_hcd [ 398.879226][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 398.884017][ T43] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 398.884044][ T43] usb 5-1: config 0 has no interface number 0 [ 398.884090][ T43] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 398.884116][ T43] usb 5-1: config 0 interface 126 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0 [ 398.884138][ T43] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 0 [ 398.884161][ T43] usb 5-1: config 0 interface 126 has no altsetting 0 [ 398.887814][ T43] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 398.887843][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.887862][ T43] usb 5-1: Product: syz [ 398.887876][ T43] usb 5-1: Manufacturer: syz [ 398.887891][ T43] usb 5-1: SerialNumber: syz [ 398.985315][ T43] usb 5-1: config 0 descriptor?? [ 398.986711][ T9801] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 399.001367][ T6080] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 399.001419][ T6080] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 399.001446][ T6080] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 399.001470][ T6080] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 399.001495][ T6080] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 399.002548][ T6080] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 399.002595][ T6080] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 399.002626][ T6080] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 399.002650][ T6080] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 399.002674][ T6080] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 399.003976][ T6080] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 399.004029][ T6080] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 399.004053][ T6080] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 399.004077][ T6080] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 399.004101][ T6080] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 399.009839][ T6080] usb 3-1: string descriptor 0 read error: -22 [ 399.010009][ T6080] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 399.010031][ T6080] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.183249][ T6080] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 399.666113][ T9816] comedi comedi4: bad chanlist[0]=0x04040007 chan=7 range length=2 [ 400.120483][ T6299] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 400.295914][ T6299] usb 4-1: not running at top speed; connect to a high speed hub [ 400.297249][ T6299] usb 4-1: config 8 has an invalid interface number: 241 but max is 0 [ 400.297264][ T6299] usb 4-1: config 8 has no interface number 0 [ 400.297291][ T6299] usb 4-1: config 8 interface 241 has no altsetting 0 [ 400.332208][ T6299] usb 4-1: New USB device found, idVendor=0c52, idProduct=2843, bcdDevice=ca.31 [ 400.332381][ T6299] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.332428][ T6299] usb 4-1: Product: 䟺㪩漈ఈ⺐익놼禡⋥쒓–㏱㫠翿攃䨈戼䏇栾䛸אּ滲铹贮㽼만爢뻥糞듵梫ꢝ읏赁娇鬩嬆鮷펆㞙鋆壡ᡘ㙺៽煾蔷얞㔍蹓ౙ흂帗曚⓿릧カ肠ꇎ몥荖ì扉㱉䴱妾ᵻ곫吶羵ݮ孹倊㨬桋稟囻 [ 400.332443][ T6299] usb 4-1: Manufacturer: 릕⏪㼬棧谤㥁渚ᐡ皽鎸꓿폶ၖ㓢ร戎쀥ꙅ꽌좖义熋芈氞铳ᬽ稵ﵞ蓖⢗烶☑밋챉뉇쁋軖鱥獜軁믛℮諽ᴿ噓≄幎ᐸ싺晐匚湮髏릭㙢䵐∾돡ዱ䉉⚺閶談啕䣖㋛럑¾拝ར핍湣ꎮᒵ⃵柛뺖ᚻ〟돜음쒔⏳웯伙팪첹⁍竵暎㾡탲Ź朦퍂옩⍍ក [ 400.332458][ T6299] usb 4-1: SerialNumber: ఉ [ 401.464812][ T43] ir_usb 5-1:0.126: IR Dongle converter detected [ 401.467523][ T43] usb 5-1: IRDA class descriptor not found, device not bound [ 401.514092][ T43] usb 5-1: USB disconnect, device number 33 [ 401.648699][ T5911] usb 3-1: USB disconnect, device number 48 [ 401.709359][ T5814] Bluetooth: hci4: command 0x0406 tx timeout [ 401.811203][ T9847] wireguard: wg2: Could not create IPv4 socket [ 402.695662][ T6299] ftdi_sio 4-1:8.241: FTDI USB Serial Device converter detected [ 402.721512][ T6299] ftdi_sio ttyUSB0: unknown device type: 0xca31 [ 402.763339][ T6299] usb 4-1: USB disconnect, device number 38 [ 402.782852][ T6299] ftdi_sio 4-1:8.241: device disconnected [ 405.801860][ T4545] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.833864][ T9891] comedi comedi4: bad chanlist[0]=0x04040007 chan=7 range length=2 [ 405.999203][ T6080] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 406.040411][ T6299] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 406.133893][ T43] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 406.159167][ T6080] usb 3-1: Using ep0 maxpacket: 32 [ 406.161981][ T6080] usb 3-1: config 128 has an invalid interface number: 153 but max is 1 [ 406.162009][ T6080] usb 3-1: config 128 has an invalid interface number: 25 but max is 1 [ 406.162029][ T6080] usb 3-1: config 128 contains an unexpected descriptor of type 0x1, skipping [ 406.162047][ T6080] usb 3-1: config 128 has no interface number 0 [ 406.162061][ T6080] usb 3-1: config 128 has no interface number 1 [ 406.162097][ T6080] usb 3-1: config 128 interface 153 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 406.162108][ T6080] usb 3-1: config 128 interface 153 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 406.162120][ T6080] usb 3-1: config 128 interface 153 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 406.162130][ T6080] usb 3-1: config 128 interface 153 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 406.162141][ T6080] usb 3-1: config 128 interface 153 altsetting 3 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 406.162153][ T6080] usb 3-1: config 128 interface 153 altsetting 3 endpoint 0x8A has invalid maxpacket 28503, setting to 64 [ 406.162166][ T6080] usb 3-1: config 128 interface 153 altsetting 3 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 406.162187][ T6080] usb 3-1: config 128 interface 25 altsetting 7 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 406.162201][ T6080] usb 3-1: config 128 interface 25 altsetting 7 endpoint 0x9 has invalid maxpacket 431, setting to 64 [ 406.162214][ T6080] usb 3-1: config 128 interface 25 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 406.162227][ T6080] usb 3-1: config 128 interface 25 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 406.162244][ T6080] usb 3-1: config 128 interface 25 altsetting 7 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 406.162267][ T6080] usb 3-1: config 128 interface 25 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 406.162285][ T6080] usb 3-1: config 128 interface 25 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 406.162305][ T6080] usb 3-1: config 128 interface 153 has no altsetting 0 [ 406.162331][ T6080] usb 3-1: config 128 interface 25 has no altsetting 0 [ 406.164556][ T6080] usb 3-1: New USB device found, idVendor=067b, idProduct=aaa0, bcdDevice=85.0c [ 406.164584][ T6080] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.164602][ T6080] usb 3-1: Product: syz [ 406.164616][ T6080] usb 3-1: Manufacturer: 쯫ᬰ途↧몒樷㒈닓拨윔宗䶹덨䄮᜴ꂮ䁯꘧녋㶅夻崠峴襔ኺौ恘푄ڀ䱀鬺㨐蘒酁㯼枊熒ⷻ逴䛽뜷ಅ橓ೠ伸³ᆛ託毬疉迥澲뙭桷嶗甞఺풝ᴺ踚䟼൱䗶캂쒱倝Ⳮｚ㸫돞㹗ᝋᯜ㶯끄效㸙䮌괒詏釫 [ 406.164644][ T6080] usb 3-1: SerialNumber: syz [ 406.209334][ T6299] usb 2-1: Using ep0 maxpacket: 16 [ 406.375587][ T6299] usb 2-1: config 8 has an invalid interface number: 232 but max is 0 [ 406.375614][ T6299] usb 2-1: config 8 has no interface number 0 [ 406.375658][ T6299] usb 2-1: config 8 interface 232 altsetting 3 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 406.375684][ T6299] usb 2-1: config 8 interface 232 has no altsetting 0 [ 406.398025][ T6299] usb 2-1: New USB device found, idVendor=413c, idProduct=81ba, bcdDevice= 4.03 [ 406.403299][ T6299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.403323][ T6299] usb 2-1: Product: Ј [ 406.403337][ T6299] usb 2-1: Manufacturer: Ё [ 406.403350][ T6299] usb 2-1: SerialNumber: syz [ 407.819935][ T43] usb 5-1: not running at top speed; connect to a high speed hub [ 407.874263][ T5814] Bluetooth: hci4: command 0x0406 tx timeout [ 407.882112][ T43] usb 5-1: config 8 has an invalid interface number: 241 but max is 0 [ 407.882139][ T43] usb 5-1: config 8 has no interface number 0 [ 407.882192][ T43] usb 5-1: config 8 interface 241 has no altsetting 0 [ 407.886661][ T43] usb 5-1: New USB device found, idVendor=0c52, idProduct=2843, bcdDevice=ca.31 [ 407.886690][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.886710][ T43] usb 5-1: Product: 䟺㪩漈ఈ⺐익놼禡⋥쒓–㏱㫠翿攃䨈戼䏇栾䛸אּ滲铹贮㽼만爢뻥糞듵梫ꢝ읏赁娇鬩嬆鮷펆㞙鋆壡ᡘ㙺៽煾蔷얞㔍蹓ౙ흂帗曚⓿릧カ肠ꇎ몥荖ì扉㱉䴱妾ᵻ곫吶羵ݮ孹倊㨬桋稟囻 [ 407.886737][ T43] usb 5-1: Manufacturer: 릕⏪㼬棧谤㥁渚ᐡ皽鎸꓿폶ၖ㓢ร戎쀥ꙅ꽌좖义熋芈氞铳ᬽ稵ﵞ蓖⢗烶☑밋챉뉇쁋軖鱥獜軁믛℮諽ᴿ噓≄幎ᐸ싺晐匚湮髏릭㙢䵐∾돡ዱ䉉⚺閶談啕䣖㋛럑¾拝ར핍湣ꎮᒵ⃵柛뺖ᚻ〟돜음쒔⏳웯伙팪첹⁍竵暎㾡탲Ź朦퍂옩⍍ក [ 407.886769][ T43] usb 5-1: SerialNumber: ఉ [ 408.000778][ T9889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.024351][ T9889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.080770][ T6080] pl2303 3-1:128.153: required endpoints missing [ 408.126030][ T6080] pl2303 3-1:128.25: required endpoints missing [ 408.162670][ T6080] usb 3-1: USB disconnect, device number 49 [ 408.270286][ T6299] cdc_ether 2-1:8.232: skipping garbage [ 408.270307][ T6299] cdc_ether 2-1:8.232: skipping garbage [ 408.270323][ T6299] usb 2-1: bad CDC descriptors [ 408.333574][ T6299] usb 2-1: USB disconnect, device number 31 [ 410.740988][ T43] ftdi_sio 5-1:8.241: FTDI USB Serial Device converter detected [ 410.742791][ T43] ftdi_sio ttyUSB0: unknown device type: 0xca31 [ 410.830342][ T43] usb 5-1: USB disconnect, device number 34 [ 410.844549][ T43] ftdi_sio 5-1:8.241: device disconnected [ 411.333770][ T9947] overlayfs: failed to create directory ./bus/work (errno: 1); mounting read-only [ 411.548542][ T9956] comedi comedi4: bad chanlist[0]=0x04040007 chan=7 range length=2 [ 411.810369][ T6080] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 411.869251][ T5992] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 411.963713][ T6080] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.963747][ T6080] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.963775][ T6080] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 411.963787][ T6080] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.978418][ T6080] usb 5-1: config 0 descriptor?? [ 412.021986][ T5992] usb 4-1: not running at top speed; connect to a high speed hub [ 412.023282][ T5992] usb 4-1: config 8 has an invalid interface number: 241 but max is 0 [ 412.023307][ T5992] usb 4-1: config 8 has no interface number 0 [ 412.023395][ T5992] usb 4-1: config 8 interface 241 has no altsetting 0 [ 412.025886][ T5992] usb 4-1: New USB device found, idVendor=0c52, idProduct=2843, bcdDevice=ca.31 [ 412.025903][ T5992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.025912][ T5992] usb 4-1: Product: 䟺㪩漈ఈ⺐익놼禡⋥쒓–㏱㫠翿攃䨈戼䏇栾䛸אּ滲铹贮㽼만爢뻥糞듵梫ꢝ읏赁娇鬩嬆鮷펆㞙鋆壡ᡘ㙺៽煾蔷얞㔍蹓ౙ흂帗曚⓿릧カ肠ꇎ몥荖ì扉㱉䴱妾ᵻ곫吶羵ݮ孹倊㨬桋稟囻 [ 412.025988][ T5992] usb 4-1: Manufacturer: 릕⏪㼬棧谤㥁渚ᐡ皽鎸꓿폶ၖ㓢ร戎쀥ꙅ꽌좖义熋芈氞铳ᬽ稵ﵞ蓖⢗烶☑밋챉뉇쁋軖鱥獜軁믛℮諽ᴿ噓≄幎ᐸ싺晐匚湮髏릭㙢䵐∾돡ዱ䉉⚺閶談啕䣖㋛럑¾拝ར핍湣ꎮᒵ⃵柛뺖ᚻ〟돜음쒔⏳웯伙팪첹⁍竵暎㾡탲Ź朦퍂옩⍍ក [ 412.026020][ T5992] usb 4-1: SerialNumber: ఉ [ 412.693173][ T6080] usbhid 5-1:0.0: can't add hid device: -71 [ 412.693840][ T6080] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 412.721715][ T6080] usb 5-1: USB disconnect, device number 35 [ 413.631029][ T5814] Bluetooth: hci4: command 0x0406 tx timeout [ 413.989309][ T6080] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 414.299265][ T6080] usb 2-1: Using ep0 maxpacket: 16 [ 414.303807][ T6080] usb 2-1: config 8 has an invalid interface number: 232 but max is 0 [ 414.303835][ T6080] usb 2-1: config 8 has no interface number 0 [ 414.304100][ T6080] usb 2-1: config 8 interface 232 altsetting 3 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 414.304130][ T6080] usb 2-1: config 8 interface 232 has no altsetting 0 [ 414.307414][ T6080] usb 2-1: New USB device found, idVendor=413c, idProduct=81ba, bcdDevice= 4.03 [ 414.307444][ T6080] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.307528][ T6080] usb 2-1: Product: Ј [ 414.307542][ T6080] usb 2-1: Manufacturer: Ё [ 414.307556][ T6080] usb 2-1: SerialNumber: syz [ 414.620806][ T5992] ftdi_sio 4-1:8.241: FTDI USB Serial Device converter detected [ 414.622577][ T5992] ftdi_sio ttyUSB0: unknown device type: 0xca31 [ 414.637348][ T6080] cdc_ether 2-1:8.232: skipping garbage [ 414.637370][ T6080] cdc_ether 2-1:8.232: skipping garbage [ 414.637385][ T6080] usb 2-1: bad CDC descriptors [ 414.718321][ T5992] usb 4-1: USB disconnect, device number 39 [ 414.723610][ T6080] usb 2-1: USB disconnect, device number 32 [ 414.784364][ T5992] ftdi_sio 4-1:8.241: device disconnected [ 415.269501][ T5992] usb 3-1: new low-speed USB device number 50 using dummy_hcd [ 415.352589][T10042] comedi comedi4: bad chanlist[0]=0x04040007 chan=7 range length=2 [ 415.425899][ T5992] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 415.425957][ T5992] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 415.425983][ T5992] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 415.426008][ T5992] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 415.426033][ T5992] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 415.427204][ T5992] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 415.427262][ T5992] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 415.427286][ T5992] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 415.427308][ T5992] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 415.427329][ T5992] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 415.428644][ T5992] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 415.428692][ T5992] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 415.428717][ T5992] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 415.428742][ T5992] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 415.428831][ T5992] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 415.586932][ T5992] usb 3-1: string descriptor 0 read error: -22 [ 415.587057][ T5992] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 415.587069][ T5992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.630352][ T5992] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 415.649566][ T804] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 415.801346][ T804] usb 2-1: not running at top speed; connect to a high speed hub [ 415.802230][ T804] usb 2-1: config 8 has an invalid interface number: 241 but max is 0 [ 415.802245][ T804] usb 2-1: config 8 has no interface number 0 [ 415.802272][ T804] usb 2-1: config 8 interface 241 has no altsetting 0 [ 415.805666][ T804] usb 2-1: New USB device found, idVendor=0c52, idProduct=2843, bcdDevice=ca.31 [ 415.805682][ T804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.805692][ T804] usb 2-1: Product: 䟺㪩漈ఈ⺐익놼禡⋥쒓–㏱㫠翿攃䨈戼䏇栾䛸אּ滲铹贮㽼만爢뻥糞듵梫ꢝ읏赁娇鬩嬆鮷펆㞙鋆壡ᡘ㙺៽煾蔷얞㔍蹓ౙ흂帗曚⓿릧カ肠ꇎ몥荖ì扉㱉䴱妾ᵻ곫吶羵ݮ孹倊㨬桋稟囻 [ 415.805706][ T804] usb 2-1: Manufacturer: 릕⏪㼬棧谤㥁渚ᐡ皽鎸꓿폶ၖ㓢ร戎쀥ꙅ꽌좖义熋芈氞铳ᬽ稵ﵞ蓖⢗烶☑밋챉뉇쁋軖鱥獜軁믛℮諽ᴿ噓≄幎ᐸ싺晐匚湮髏릭㙢䵐∾돡ዱ䉉⚺閶談啕䣖㋛럑¾拝ར핍湣ꎮᒵ⃵柛뺖ᚻ〟돜음쒔⏳웯伙팪첹⁍竵暎㾡탲Ź朦퍂옩⍍ក [ 415.805722][ T804] usb 2-1: SerialNumber: ఉ [ 416.002844][ T43] usb 3-1: USB disconnect, device number 50 [ 416.561121][T10062] overlayfs: failed to resolve './file1': -2 [ 417.540974][ T5812] Bluetooth: hci4: command 0x0406 tx timeout [ 417.848112][T10091] overlayfs: failed to resolve './file1': -2 [ 418.510203][T10104] netlink: 'syz.0.1397': attribute type 21 has an invalid length. [ 418.510272][T10104] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1397'. [ 418.510307][T10104] netlink: 'syz.0.1397': attribute type 1 has an invalid length. [ 418.651223][ T5992] usb 4-1: new low-speed USB device number 40 using dummy_hcd [ 419.060971][ T804] ftdi_sio 2-1:8.241: FTDI USB Serial Device converter detected [ 419.063920][ T804] ftdi_sio ttyUSB0: unknown device type: 0xca31 [ 419.086383][ T804] usb 2-1: USB disconnect, device number 33 [ 419.134636][ T804] ftdi_sio 2-1:8.241: device disconnected [ 419.262444][T10107] comedi comedi3: comedi_config --init_data is deprecated [ 419.272011][ T5992] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 419.272068][ T5992] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 419.272094][ T5992] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 419.272118][ T5992] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 419.272142][ T5992] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 419.273165][ T5992] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 419.273214][ T5992] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 419.273239][ T5992] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 419.273262][ T5992] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 419.273293][ T5992] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 419.275593][ T5992] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 419.275649][ T5992] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 419.275675][ T5992] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 419.275699][ T5992] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 419.275723][ T5992] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 419.285381][ T5992] usb 4-1: string descriptor 0 read error: -22 [ 419.285529][ T5992] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 419.285550][ T5992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.541908][ T5992] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 419.753876][ T43] usb 4-1: USB disconnect, device number 40 [ 420.478522][T10132] netlink: 'syz.1.1407': attribute type 21 has an invalid length. [ 420.478570][T10132] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1407'. [ 420.478598][T10132] netlink: 'syz.1.1407': attribute type 1 has an invalid length. [ 421.003669][T10140] netlink: 'syz.2.1409': attribute type 1 has an invalid length. [ 421.003736][T10140] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1409'. [ 421.805212][T10139] comedi comedi4: bad chanlist[0]=0x04040007 chan=7 range length=2 [ 422.099256][ T43] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 422.186707][T10156] comedi comedi3: comedi_config --init_data is deprecated [ 422.251833][ T43] usb 4-1: not running at top speed; connect to a high speed hub [ 422.252995][ T43] usb 4-1: config 8 has an invalid interface number: 241 but max is 0 [ 422.253012][ T43] usb 4-1: config 8 has no interface number 0 [ 422.253041][ T43] usb 4-1: config 8 interface 241 has no altsetting 0 [ 422.255847][ T43] usb 4-1: New USB device found, idVendor=0c52, idProduct=2843, bcdDevice=ca.31 [ 422.255866][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.255876][ T43] usb 4-1: Product: 䟺㪩漈ఈ⺐익놼禡⋥쒓–㏱㫠翿攃䨈戼䏇栾䛸אּ滲铹贮㽼만爢뻥糞듵梫ꢝ읏赁娇鬩嬆鮷펆㞙鋆壡ᡘ㙺៽煾蔷얞㔍蹓ౙ흂帗曚⓿릧カ肠ꇎ몥荖ì扉㱉䴱妾ᵻ곫吶羵ݮ孹倊㨬桋稟囻 [ 422.255891][ T43] usb 4-1: Manufacturer: 릕⏪㼬棧谤㥁渚ᐡ皽鎸꓿폶ၖ㓢ร戎쀥ꙅ꽌좖义熋芈氞铳ᬽ稵ﵞ蓖⢗烶☑밋챉뉇쁋軖鱥獜軁믛℮諽ᴿ噓≄幎ᐸ싺晐匚湮髏릭㙢䵐∾돡ዱ䉉⚺閶談啕䣖㋛럑¾拝ར핍湣ꎮᒵ⃵柛뺖ᚻ〟돜음쒔⏳웯伙팪첹⁍竵暎㾡탲Ź朦퍂옩⍍ក [ 422.255906][ T43] usb 4-1: SerialNumber: ఉ [ 423.401587][ T3085] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.685099][T10176] netlink: 'syz.2.1422': attribute type 1 has an invalid length. [ 423.685167][T10176] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1422'. [ 423.880749][ T5812] Bluetooth: hci4: command 0x0406 tx timeout [ 424.439412][ T804] usb 2-1: new low-speed USB device number 34 using dummy_hcd [ 424.506983][ T43] ftdi_sio 4-1:8.241: FTDI USB Serial Device converter detected [ 424.517284][ T43] ftdi_sio ttyUSB0: unknown device type: 0xca31 [ 424.555519][ T43] usb 4-1: USB disconnect, device number 41 [ 424.565751][ T43] ftdi_sio 4-1:8.241: device disconnected [ 424.591860][ T804] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 424.591915][ T804] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 424.591929][ T804] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 424.591942][ T804] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 424.591954][ T804] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 424.593571][ T804] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 424.593606][ T804] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 424.593620][ T804] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 424.593633][ T804] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 424.593646][ T804] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 424.594478][ T804] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 424.594505][ T804] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 424.594518][ T804] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 424.594531][ T804] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 424.594544][ T804] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 424.597101][ T804] usb 2-1: string descriptor 0 read error: -22 [ 424.597183][ T804] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 424.597194][ T804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.715350][ T804] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 426.409532][T10189] comedi comedi3: comedi_config --init_data is deprecated [ 427.280601][ T5911] usb 2-1: USB disconnect, device number 34 [ 427.546405][T10208] comedi comedi4: bad chanlist[0]=0x04040007 chan=7 range length=2 [ 427.805985][T10215] netlink: 'syz.0.1434': attribute type 21 has an invalid length. [ 427.806051][T10215] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1434'. [ 427.806091][T10215] netlink: 'syz.0.1434': attribute type 1 has an invalid length. [ 427.878487][ T5911] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 428.197916][ T924] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 428.569439][ T804] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 428.589244][ T5911] usb 2-1: Using ep0 maxpacket: 16 [ 428.593173][ T5911] usb 2-1: config 68 has an invalid interface number: 49 but max is 1 [ 428.593201][ T5911] usb 2-1: config 68 has an invalid interface association descriptor of length 5, skipping [ 428.593220][ T5911] usb 2-1: config 68 has an invalid interface number: 139 but max is 1 [ 428.593239][ T5911] usb 2-1: config 68 has no interface number 0 [ 428.593255][ T5911] usb 2-1: config 68 has no interface number 1 [ 428.593312][ T5911] usb 2-1: config 68 interface 49 altsetting 85 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 428.593338][ T5911] usb 2-1: config 68 interface 49 altsetting 85 has an invalid descriptor for endpoint zero, skipping [ 428.593361][ T5911] usb 2-1: config 68 interface 49 altsetting 85 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 428.593386][ T5911] usb 2-1: config 68 interface 49 altsetting 85 has a duplicate endpoint with address 0x4, skipping [ 428.593409][ T5911] usb 2-1: config 68 interface 49 has no altsetting 0 [ 428.593426][ T5911] usb 2-1: config 68 interface 139 has no altsetting 0 [ 428.596495][ T5911] usb 2-1: New USB device found, idVendor=0af0, idProduct=6731, bcdDevice=91.06 [ 428.596523][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.596549][ T5911] usb 2-1: Product: syz [ 428.596562][ T5911] usb 2-1: Manufacturer: 见툓ﶣ멀㍊㒰﯄ꢩ耩쮶柜湳勁ꡅ㎐榱ᴴ뭿뇁곊῀厓Ⰵ [ 428.596580][ T5911] usb 2-1: SerialNumber: syz [ 428.752163][ T804] usb 4-1: not running at top speed; connect to a high speed hub [ 428.753829][ T804] usb 4-1: config 8 has an invalid interface number: 241 but max is 0 [ 428.753853][ T804] usb 4-1: config 8 has no interface number 0 [ 428.753902][ T804] usb 4-1: config 8 interface 241 has no altsetting 0 [ 428.846486][ T804] usb 4-1: New USB device found, idVendor=0c52, idProduct=2843, bcdDevice=ca.31 [ 428.846524][ T804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.846543][ T804] usb 4-1: Product: 䟺㪩漈ఈ⺐익놼禡⋥쒓–㏱㫠翿攃䨈戼䏇栾䛸אּ滲铹贮㽼만爢뻥糞듵梫ꢝ읏赁娇鬩嬆鮷펆㞙鋆壡ᡘ㙺៽煾蔷얞㔍蹓ౙ흂帗曚⓿릧カ肠ꇎ몥荖ì扉㱉䴱妾ᵻ곫吶羵ݮ孹倊㨬桋稟囻 [ 428.846572][ T804] usb 4-1: Manufacturer: 릕⏪㼬棧谤㥁渚ᐡ皽鎸꓿폶ၖ㓢ร戎쀥ꙅ꽌좖义熋芈氞铳ᬽ稵ﵞ蓖⢗烶☑밋챉뉇쁋軖鱥獜軁믛℮諽ᴿ噓≄幎ᐸ싺晐匚湮髏릭㙢䵐∾돡ዱ䉉⚺閶談啕䣖㋛럑¾拝ར핍湣ꎮᒵ⃵柛뺖ᚻ〟돜음쒔⏳웯伙팪첹⁍竵暎㾡탲Ź朦퍂옩⍍ក [ 428.846601][ T804] usb 4-1: SerialNumber: ఉ [ 428.901869][T10222] netlink: 'syz.0.1437': attribute type 21 has an invalid length. [ 428.901937][T10222] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1437'. [ 428.901972][T10222] netlink: 'syz.0.1437': attribute type 1 has an invalid length. [ 429.597114][ T924] usb 5-1: Using ep0 maxpacket: 8 [ 429.617180][ T5911] usb 2-1: Interface #139 referenced by multiple IADs [ 429.631408][ T5814] Bluetooth: hci4: command 0x0406 tx timeout [ 429.660653][ T924] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 429.660682][ T924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.660700][ T924] usb 5-1: Product: syz [ 429.660713][ T924] usb 5-1: Manufacturer: syz [ 429.660725][ T924] usb 5-1: SerialNumber: syz [ 429.718855][ T924] usb 5-1: config 0 descriptor?? [ 430.129298][ T37] audit: type=1326 audit(1767704922.837:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10201 comm="syz.4.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74ce87f749 code=0x7ffc0000 [ 430.129670][ T37] audit: type=1326 audit(1767704922.837:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10201 comm="syz.4.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74ce87f749 code=0x7ffc0000 [ 430.130095][ T37] audit: type=1326 audit(1767704922.837:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10201 comm="syz.4.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f74ce87df90 code=0x7ffc0000 [ 430.132144][ T37] audit: type=1326 audit(1767704922.837:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10201 comm="syz.4.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f74ce87f34b code=0x7ffc0000 [ 430.135121][ T37] audit: type=1326 audit(1767704922.837:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10201 comm="syz.4.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f74ce87f34b code=0x7ffc0000 [ 430.149859][T10203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.150378][T10203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.158808][ T37] audit: type=1326 audit(1767704922.857:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10201 comm="syz.4.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74ce87f749 code=0x7ffc0000 [ 430.167069][ T37] audit: type=1326 audit(1767704922.867:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10201 comm="syz.4.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74ce87f749 code=0x7ffc0000 [ 430.169332][ T37] audit: type=1326 audit(1767704922.867:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10201 comm="syz.4.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f74ce87f749 code=0x7ffc0000 [ 430.174695][ T37] audit: type=1326 audit(1767704922.877:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10201 comm="syz.4.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74ce87f749 code=0x7ffc0000 [ 430.175101][ T37] audit: type=1326 audit(1767704922.877:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10201 comm="syz.4.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f74ce87f749 code=0x7ffc0000 [ 430.372891][T10204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.373516][T10204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.282538][ T5911] hso 2-1:68.49: Not our interface [ 431.439517][ T804] ftdi_sio 4-1:8.241: FTDI USB Serial Device converter detected [ 431.448493][ T804] ftdi_sio ttyUSB0: unknown device type: 0xca31 [ 431.473945][ T5911] hso 2-1:68.139: Not our interface [ 431.505637][ T5911] usb 2-1: USB disconnect, device number 35 [ 431.518342][ T804] usb 4-1: USB disconnect, device number 42 [ 431.548466][ T804] ftdi_sio 4-1:8.241: device disconnected [ 431.833553][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.930431][T10235] comedi comedi3: comedi_config --init_data is deprecated [ 432.069210][ T804] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 432.169180][ T5911] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 432.219218][ T804] usb 4-1: Using ep0 maxpacket: 16 [ 432.236842][ T804] usb 4-1: config 8 has an invalid interface number: 232 but max is 0 [ 432.236870][ T804] usb 4-1: config 8 has no interface number 0 [ 432.236917][ T804] usb 4-1: config 8 interface 232 altsetting 3 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 432.236944][ T804] usb 4-1: config 8 interface 232 has no altsetting 0 [ 432.277152][ T804] usb 4-1: New USB device found, idVendor=413c, idProduct=81ba, bcdDevice= 4.03 [ 432.277182][ T804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.277201][ T804] usb 4-1: Product: Ј [ 432.277215][ T804] usb 4-1: Manufacturer: Ё [ 432.277228][ T804] usb 4-1: SerialNumber: syz [ 432.345478][ T5992] usb 5-1: USB disconnect, device number 36 [ 432.357642][ T5911] usb 2-1: Using ep0 maxpacket: 32 [ 432.380353][ T5911] usb 2-1: config 128 has an invalid interface number: 153 but max is 1 [ 432.380381][ T5911] usb 2-1: config 128 has an invalid interface number: 25 but max is 1 [ 432.380575][ T5911] usb 2-1: config 128 contains an unexpected descriptor of type 0x1, skipping [ 432.380594][ T5911] usb 2-1: config 128 has no interface number 0 [ 432.380609][ T5911] usb 2-1: config 128 has no interface number 1 [ 432.380750][ T5911] usb 2-1: config 128 interface 153 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 432.380771][ T5911] usb 2-1: config 128 interface 153 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 432.380792][ T5911] usb 2-1: config 128 interface 153 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 432.380812][ T5911] usb 2-1: config 128 interface 153 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 432.380886][ T5911] usb 2-1: config 128 interface 153 altsetting 3 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 432.380909][ T5911] usb 2-1: config 128 interface 153 altsetting 3 endpoint 0x8A has invalid maxpacket 28503, setting to 64 [ 432.380934][ T5911] usb 2-1: config 128 interface 153 altsetting 3 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 432.380975][ T5911] usb 2-1: config 128 interface 25 altsetting 7 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 432.381053][ T5911] usb 2-1: config 128 interface 25 altsetting 7 endpoint 0x9 has invalid maxpacket 431, setting to 64 [ 432.381078][ T5911] usb 2-1: config 128 interface 25 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 432.387569][ T5911] usb 2-1: config 128 interface 25 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 432.387598][ T5911] usb 2-1: config 128 interface 25 altsetting 7 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 432.387619][ T5911] usb 2-1: config 128 interface 25 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 432.387635][ T5911] usb 2-1: config 128 interface 25 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 432.387655][ T5911] usb 2-1: config 128 interface 153 has no [ 432.387655][ T5911] usb 2-1: config 128 interface 153 has no altsetting 0 [ 432.387671][ T5911] usb 2-1: config 128 interface 25 has no altsetting 0 [ 432.569299][ T5911] usb 2-1: New USB device found, idVendor=067b, idProduct=aaa0, bcdDevice=85.0c [ 432.569328][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.569346][ T5911] usb 2-1: Product: syz [ 432.569360][ T5911] usb 2-1: Manufacturer: 쯫ᬰ途↧몒樷㒈닓拨윔宗䶹덨䄮᜴ꂮ䁯꘧녋㶅夻崠峴襔ኺौ恘푄ڀ䱀鬺㨐蘒酁㯼枊熒ⷻ逴䛽뜷ಅ橓ೠ伸³ᆛ託毬疉迥澲뙭桷嶗甞఺풝ᴺ踚䟼൱䗶캂쒱倝Ⳮｚ㸫돞㹗ᝋᯜ㶯끄效㸙䮌괒詏釫 [ 432.569388][ T5911] usb 2-1: SerialNumber: syz [ 432.630937][ T5992] ================================================================== [ 432.630954][ T5992] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 432.630985][ T5992] Read of size 8 at addr ffffc9000d1d9008 by task kworker/0:8/5992 [ 432.631009][ T5992] [ 432.631021][ T5992] CPU: 0 UID: 0 PID: 5992 Comm: kworker/0:8 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 432.631043][ T5992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 432.631057][ T5992] Workqueue: usb_hub_wq hub_event [ 432.631083][ T5992] Call Trace: [ 432.631089][ T5992] [ 432.631099][ T5992] dump_stack_lvl+0xe8/0x150 [ 432.631124][ T5992] print_report+0xca/0x240 [ 432.631145][ T5992] ? __list_add_valid_or_report+0x4e/0x130 [ 432.631166][ T5992] kasan_report+0x118/0x150 [ 432.631194][ T5992] ? __list_add_valid_or_report+0x4e/0x130 [ 432.631218][ T5992] __list_add_valid_or_report+0x4e/0x130 [ 432.631241][ T5992] kcov_remote_stop+0x458/0x690 [ 432.631263][ T5992] hub_event+0x4982/0x4f30 [ 432.631290][ T5992] ? __lock_acquire+0x6b6/0x2cf0 [ 432.631328][ T5992] ? __pfx_hub_event+0x10/0x10 [ 432.631349][ T5992] ? process_scheduled_works+0x9ef/0x1770 [ 432.631372][ T5992] ? process_scheduled_works+0x9ef/0x1770 [ 432.631392][ T5992] ? process_scheduled_works+0x9ef/0x1770 [ 432.631412][ T5992] process_scheduled_works+0xad1/0x1770 [ 432.631443][ T5992] ? __pfx_process_scheduled_works+0x10/0x10 [ 432.631462][ T5992] ? do_raw_spin_lock+0x121/0x290 [ 432.631489][ T5992] worker_thread+0x8a0/0xda0 [ 432.631519][ T5992] kthread+0x711/0x8a0 [ 432.631543][ T5992] ? __pfx_worker_thread+0x10/0x10 [ 432.631563][ T5992] ? __pfx_kthread+0x10/0x10 [ 432.631584][ T5992] ? rt_spin_unlock+0x150/0x200 [ 432.631609][ T5992] ? rt_spin_unlock+0x161/0x200 [ 432.631630][ T5992] ? __pfx_kthread+0x10/0x10 [ 432.631653][ T5992] ret_from_fork+0x510/0xa50 [ 432.631673][ T5992] ? __pfx_ret_from_fork+0x10/0x10 [ 432.631691][ T5992] ? __switch_to+0xc9e/0x1480 [ 432.631717][ T5992] ? __pfx_kthread+0x10/0x10 [ 432.631748][ T5992] ret_from_fork_asm+0x1a/0x30 [ 432.631779][ T5992] [ 432.631786][ T5992] [ 432.631791][ T5992] The buggy address belongs to a vmalloc virtual mapping [ 432.631808][ T5992] Memory state around the buggy address: [ 432.631818][ T5992] ffffc9000d1d8f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 432.631831][ T5992] ffffc9000d1d8f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 432.631843][ T5992] >ffffc9000d1d9000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 432.631853][ T5992] ^ [ 432.631862][ T5992] ffffc9000d1d9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 432.631874][ T5992] ffffc9000d1d9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 432.631884][ T5992] ================================================================== [ 432.631904][ T5992] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 432.631920][ T5992] CPU: 0 UID: 0 PID: 5992 Comm: kworker/0:8 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 432.631941][ T5992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 432.631953][ T5992] Workqueue: usb_hub_wq hub_event [ 432.631974][ T5992] Call Trace: [ 432.631980][ T5992] [ 432.631987][ T5992] vpanic+0x1e0/0x670 [ 432.632017][ T5992] panic+0xb9/0xc0 [ 432.632039][ T5992] ? __pfx_panic+0x10/0x10 [ 432.632063][ T5992] ? __list_add_valid_or_report+0x4e/0x130 [ 432.632090][ T5992] ? __list_add_valid_or_report+0x4e/0x130 [ 432.632109][ T5992] check_panic_on_warn+0x89/0xb0 [ 432.632137][ T5992] ? __list_add_valid_or_report+0x4e/0x130 [ 432.632158][ T5992] end_report+0x6f/0x140 [ 432.632182][ T5992] kasan_report+0x129/0x150 [ 432.632207][ T5992] ? __list_add_valid_or_report+0x4e/0x130 [ 432.632233][ T5992] __list_add_valid_or_report+0x4e/0x130 [ 432.632255][ T5992] kcov_remote_stop+0x458/0x690 [ 432.632277][ T5992] hub_event+0x4982/0x4f30 [ 432.632303][ T5992] ? __lock_acquire+0x6b6/0x2cf0 [ 432.632341][ T5992] ? __pfx_hub_event+0x10/0x10 [ 432.632362][ T5992] ? process_scheduled_works+0x9ef/0x1770 [ 432.632385][ T5992] ? process_scheduled_works+0x9ef/0x1770 [ 432.632404][ T5992] ? process_scheduled_works+0x9ef/0x1770 [ 432.632424][ T5992] process_scheduled_works+0xad1/0x1770 [ 432.632456][ T5992] ? __pfx_process_scheduled_works+0x10/0x10 [ 432.632475][ T5992] ? do_raw_spin_lock+0x121/0x290 [ 432.632501][ T5992] worker_thread+0x8a0/0xda0 [ 432.632532][ T5992] kthread+0x711/0x8a0 [ 432.632555][ T5992] ? __pfx_worker_thread+0x10/0x10 [ 432.632575][ T5992] ? __pfx_kthread+0x10/0x10 [ 432.632596][ T5992] ? rt_spin_unlock+0x150/0x200 [ 432.632624][ T5992] ? rt_spin_unlock+0x161/0x200 [ 432.632645][ T5992] ? __pfx_kthread+0x10/0x10 [ 432.632668][ T5992] ret_from_fork+0x510/0xa50 [ 432.632687][ T5992] ? __pfx_ret_from_fork+0x10/0x10 [ 432.632704][ T5992] ? __switch_to+0xc9e/0x1480 [ 432.632730][ T5992] ? __pfx_kthread+0x10/0x10 [ 432.632753][ T5992] ret_from_fork_asm+0x1a/0x30 [ 432.632785][ T5992] [ 432.633177][ T5992] Kernel Offset: disabled